type=DAEMON_START msg=audit(1770100735.175:3304): op=start ver=3.0.7 format=enriched kernel=5.14.0-284.11.1.el9_2.x86_64 auid=4294967295 pid=727 uid=0 ses=4294967295 subj=system_u:system_r:auditd_t:s0 res=successAUID="unset" UID="root" type=SERVICE_START msg=audit(1770100735.182:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100735.206:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpcbind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CONFIG_CHANGE msg=audit(1770100735.228:7): op=set audit_backlog_limit=8192 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset" type=SYSCALL msg=audit(1770100735.228:7): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffd678ba980 a2=3c a3=0 items=0 ppid=732 pid=742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770100735.228:7): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 type=CONFIG_CHANGE msg=audit(1770100735.228:8): op=set audit_failure=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset" type=SYSCALL msg=audit(1770100735.228:8): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffd678ba980 a2=3c a3=0 items=0 ppid=732 pid=742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770100735.228:8): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 type=CONFIG_CHANGE msg=audit(1770100735.229:9): op=set audit_backlog_wait_time=60000 old=60000 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset" type=SYSCALL msg=audit(1770100735.229:9): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffd678ba980 a2=3c a3=0 items=0 ppid=732 pid=742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770100735.229:9): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 type=SERVICE_START msg=audit(1770100735.234:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SYSTEM_BOOT msg=audit(1770100735.244:11): pid=749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100735.253:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100735.398:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100735.419:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770100735.442:15): prog-id=24 op=LOAD type=SERVICE_START msg=audit(1770100735.479:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-broker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770100735.481:17): prog-id=25 op=LOAD type=SERVICE_START msg=audit(1770100735.492:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770100735.505:19): prog-id=26 op=LOAD type=BPF msg=audit(1770100735.505:20): prog-id=27 op=LOAD type=BPF msg=audit(1770100735.505:21): prog-id=28 op=LOAD type=SERVICE_START msg=audit(1770100735.515:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dracut-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100735.519:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100735.557:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100735.559:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770100736.394:26): prog-id=29 op=LOAD type=BPF msg=audit(1770100736.394:27): prog-id=30 op=LOAD type=SERVICE_START msg=audit(1770100736.476:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100736.571:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100736.646:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100736.676:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gssproxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100736.680:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rhsmcertd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100736.723:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100736.754:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100737.234:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100737.360:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=polkit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=ADD_GROUP msg=audit(1770100738.990:37): pid=1120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-group acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=ADD_USER msg=audit(1770100738.993:38): pid=1120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_MGMT msg=audit(1770100738.993:39): pid=1120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="adm" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_MGMT msg=audit(1770100738.993:40): pid=1120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="systemd-journal" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_MGMT msg=audit(1770100738.993:41): pid=1120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="adm" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_MGMT msg=audit(1770100738.994:42): pid=1120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="systemd-journal" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_MGMT msg=audit(1770100739.086:43): pid=1120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-home-dir id=1001 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="cloud-user" type=ACCT_LOCK msg=audit(1770100739.126:44): pid=1127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:passwd_t:s0 msg='op=locked-password id=1001 exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="cloud-user" type=SERVICE_START msg=audit(1770100740.233:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100740.259:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpc-statd-notify comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100740.269:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100740.276:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100740.281:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100740.285:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=serial-getty@ttyS0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100740.291:51): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SYSTEM_RUNLEVEL msg=audit(1770100740.310:52): pid=1152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100740.314:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770100740.314:54): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770100740.315:55): pid=1148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1160 suid=74 rport=60932 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770100740.315:56): pid=1148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1160 suid=74 rport=60932 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1770100740.333:57): pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770100740.350:58): pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1180 suid=74 rport=60944 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770100740.350:59): pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1180 suid=74 rport=60944 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770100740.358:60): pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1180 suid=74 rport=60944 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1770100740.359:61): pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770100740.372:62): pid=1190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770100740.387:63): pid=1198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770100740.413:64): pid=1205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1222 suid=74 rport=60980 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770100740.414:65): pid=1205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1222 suid=74 rport=60980 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770100740.420:66): pid=1148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1160 suid=74 rport=60932 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1770100740.421:67): pid=1148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770100740.485:68): pid=1263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1265 suid=74 rport=60988 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770100740.485:69): pid=1263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1265 suid=74 rport=60988 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770100740.506:70): pid=1277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1285 suid=74 rport=60994 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770100740.506:71): pid=1277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1285 suid=74 rport=60994 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1770100740.508:72): pid=1277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770100740.529:73): pid=1292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770100740.567:74): pid=1205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1222 suid=74 rport=60980 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1770100740.568:75): pid=1205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770100740.593:76): pid=1263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1265 suid=74 rport=60988 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1770100740.594:77): pid=1263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100740.620:78): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100741.176:79): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770100746.857:80): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100750.343:81): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kdump comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770100752.115:82): pid=4174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=ecdh-sha2-nistp256 spid=4175 suid=74 rport=39110 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770100752.115:83): pid=4174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=ecdh-sha2-nistp256 spid=4175 suid=74 rport=39110 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770100752.187:84): pid=4174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770100752.187:85): pid=4174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ce:1b:37:32:25:b4:26:1c:73:72:46:1c:30:74:04:4b:c4:8c:60:78:f5:88:67:28:9a:7c:b3:99:b8:b0:a2:bf exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770100752.220:86): pid=4174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770100752.221:87): pid=4174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4175 suid=74 rport=39110 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770100752.223:88): pid=4174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770100752.223:89): pid=4174 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=1 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1770100752.223:89): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd65417c80 a2=4 a3=3e8 items=0 ppid=1134 pid=4174 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770100752.223:89): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1770100752.225:90): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=SERVICE_START msg=audit(1770100752.262:91): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770100752.293:92): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1770100752.293:93): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1770100752.294:94): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770100752.294:95): pid=4178 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=2 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1770100752.294:95): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffd05f2fe00 a2=4 a3=3e8 items=0 ppid=1 pid=4178 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770100752.294:95): proctitle="(systemd)" type=USER_START msg=audit(1770100752.296:96): pid=4178 uid=0 auid=1000 ses=2 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SERVICE_START msg=audit(1770100752.423:97): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770100752.435:98): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_ACQ msg=audit(1770100752.438:99): pid=4187 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1770100752.482:100): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100752.482:101): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100752.529:102): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100752.529:103): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100752.542:104): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100752.542:105): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100752.623:106): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100752.623:107): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100752.636:108): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100752.636:109): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100753.010:110): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100753.010:111): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100761.021:112): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100761.022:113): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100761.723:114): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100761.723:115): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100765.788:116): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100765.788:117): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100766.135:118): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100766.135:119): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=SERVICE_STOP msg=audit(1770100766.693:120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770100766.732:121): prog-id=0 op=UNLOAD type=BPF msg=audit(1770100766.732:122): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1770100767.118:123): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100767.118:124): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100767.308:125): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100767.308:126): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100769.831:127): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100769.831:128): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100770.068:129): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100770.068:130): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100770.454:131): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100770.454:132): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100770.652:133): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100770.652:134): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100771.029:135): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100771.029:136): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100771.059:137): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100771.059:138): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100771.065:139): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100771.066:140): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100771.105:141): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100771.105:142): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100771.112:143): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100771.112:144): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100771.140:145): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100771.140:146): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100771.148:147): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100771.148:148): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100771.333:149): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100771.333:150): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100771.346:151): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100771.346:152): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100771.380:153): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100771.380:154): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100771.391:155): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100771.391:156): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100771.420:157): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100771.420:158): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100771.429:159): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100771.429:160): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100771.629:161): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100771.630:162): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100771.642:163): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100771.642:164): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100771.667:165): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100771.667:166): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100772.500:167): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100772.501:168): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100772.525:169): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100772.526:170): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100772.534:171): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100772.534:172): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100772.562:173): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100772.562:174): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100772.569:175): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100772.569:176): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100772.590:177): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100772.590:178): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100772.601:179): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100772.601:180): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100772.754:181): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100772.754:182): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100772.771:183): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100772.772:184): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100772.799:185): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100772.799:186): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100772.809:187): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100772.809:188): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100772.832:189): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100772.832:190): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100772.847:191): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100772.847:192): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100773.025:193): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100773.025:194): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100773.038:195): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100773.038:196): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100773.061:197): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100773.062:198): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100775.042:199): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100775.042:200): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100775.242:201): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100775.242:202): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100776.455:203): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100776.455:204): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100778.117:205): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100778.117:206): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100779.846:207): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100779.846:208): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100780.074:209): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100780.075:210): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100782.144:211): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100782.144:212): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100782.362:213): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100782.362:214): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100782.397:215): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100782.397:216): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100782.600:217): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100782.601:218): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100782.628:219): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100782.628:220): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100782.845:221): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100782.845:222): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100783.754:223): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100783.754:224): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100783.964:225): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100783.964:226): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100783.983:227): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100783.983:228): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100784.194:229): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100784.194:230): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100784.236:231): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100784.236:232): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100784.420:233): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100784.420:234): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100787.007:235): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100787.007:236): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770100787.077:237): pid=4780 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770100787.078:238): pid=4780 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6873776E7A6376707769797961736671667A70787168766D636B6C6D78756F6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770100787.080:239): pid=4780 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770100787.084:240): pid=4780 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100787.260:241): pid=4780 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770100787.260:242): pid=4780 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100787.265:243): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100787.265:244): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100787.993:245): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100787.993:246): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100788.026:247): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100788.026:248): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100788.035:249): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100788.035:250): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100788.072:251): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100788.072:252): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100788.216:253): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100788.216:254): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770100788.276:255): pid=4828 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770100788.277:256): pid=4828 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6170786F75767575777665776E676568647876646661746B6D65656A6464696F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770100788.278:257): pid=4828 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770100788.281:258): pid=4828 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100788.443:259): pid=4828 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770100788.444:260): pid=4828 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100788.448:261): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100788.448:262): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100788.467:263): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100788.468:264): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100788.507:265): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100788.507:266): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100788.521:267): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100788.521:268): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100788.552:269): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100788.552:270): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100788.672:271): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100788.673:272): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770100788.735:273): pid=4871 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770100788.735:274): pid=4871 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62687476716672797370796E7667706876776E6E6777757565656B7365627379203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770100788.735:275): pid=4871 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770100788.738:276): pid=4871 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100788.919:277): pid=4871 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770100788.920:278): pid=4871 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100788.924:279): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100788.924:280): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100788.939:281): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100788.939:282): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100788.970:283): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100788.970:284): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100790.105:285): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100790.105:286): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100790.343:287): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100790.344:288): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100790.371:289): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100790.371:290): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100790.618:291): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100790.618:292): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100790.635:293): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100790.636:294): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100790.878:295): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100790.878:296): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100790.890:297): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100790.890:298): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100791.125:299): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100791.125:300): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100791.137:301): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100791.137:302): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100791.351:303): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100791.351:304): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100791.369:305): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100791.369:306): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100791.577:307): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100791.577:308): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100791.603:309): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100791.603:310): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100791.855:311): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100791.855:312): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100791.895:313): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100791.895:314): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100792.141:315): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100792.141:316): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100792.166:317): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100792.166:318): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100792.382:319): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100792.382:320): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100792.405:321): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100792.405:322): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100792.641:323): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100792.641:324): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100792.665:325): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100792.665:326): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100792.901:327): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100792.901:328): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100792.923:329): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100792.923:330): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100793.161:331): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100793.161:332): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100793.184:333): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100793.184:334): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100793.380:335): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100793.380:336): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100793.404:337): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100793.404:338): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100793.595:339): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100793.595:340): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100793.617:341): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100793.617:342): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100793.852:343): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100793.852:344): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100793.869:345): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100793.869:346): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100794.108:347): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100794.109:348): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100794.126:349): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100794.126:350): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100794.387:351): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100794.387:352): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100794.406:353): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100794.406:354): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100794.649:355): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100794.649:356): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100794.672:357): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100794.672:358): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100794.911:359): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100794.911:360): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100794.938:361): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100794.938:362): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100795.182:363): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100795.182:364): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100795.203:365): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100795.204:366): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100795.427:367): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100795.427:368): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100795.442:369): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100795.442:370): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100795.656:371): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100795.656:372): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100795.675:373): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100795.675:374): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100795.914:375): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100795.914:376): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100795.946:377): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100795.946:378): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100796.196:379): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100796.196:380): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100796.213:381): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100796.213:382): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100796.443:383): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100796.443:384): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100796.459:385): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100796.459:386): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100796.697:387): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100796.697:388): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100804.049:389): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100804.049:390): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770100804.109:391): pid=5265 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770100804.109:392): pid=5265 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786E616A63666376776F737073656B62686A626A6B64796E6462696974636E68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770100804.110:393): pid=5265 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770100804.113:394): pid=5265 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=BPF msg=audit(1770100804.295:395): prog-id=31 op=LOAD type=BPF msg=audit(1770100804.295:396): prog-id=32 op=LOAD type=BPF msg=audit(1770100804.295:397): prog-id=33 op=LOAD type=SERVICE_START msg=audit(1770100804.351:398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770100804.403:399): pid=5265 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770100804.403:400): pid=5265 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100804.407:401): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100804.407:402): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100805.961:403): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100805.961:404): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770100806.023:405): pid=5286 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770100806.023:406): pid=5286 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656F6B616D7369626965736C7A746E6E7565757A786F776F757676706869687A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770100806.024:407): pid=5286 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770100806.027:408): pid=5286 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100806.204:409): pid=5286 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770100806.204:410): pid=5286 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100806.208:411): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100806.208:412): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100806.630:413): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100806.630:414): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100806.661:415): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100806.661:416): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100806.673:417): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100806.673:418): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100806.709:419): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100806.709:420): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100806.719:421): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100806.719:422): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100806.913:423): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100806.913:424): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100806.938:425): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100806.938:426): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100806.969:427): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100806.969:428): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100806.984:429): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100806.984:430): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100807.010:431): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100807.010:432): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100807.023:433): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100807.023:434): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100807.203:435): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100807.203:436): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100807.217:437): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100807.217:438): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100807.247:439): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100807.247:440): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100808.035:441): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100808.035:442): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100808.068:443): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100808.068:444): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100808.080:445): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100808.080:446): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100808.120:447): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100808.120:448): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100808.132:449): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100808.132:450): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100808.345:451): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100808.345:452): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100808.363:453): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100808.363:454): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100808.397:455): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100808.397:456): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100808.414:457): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100808.414:458): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100808.445:459): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100808.445:460): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100808.453:461): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100808.453:462): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100808.625:463): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100808.625:464): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100808.639:465): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100808.639:466): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100808.668:467): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100808.668:468): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100809.888:469): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100809.888:470): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100809.920:471): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100809.920:472): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100809.928:473): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100809.928:474): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100809.966:475): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100809.966:476): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100809.974:477): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100809.974:478): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770100810.037:479): pid=5536 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770100810.037:480): pid=5536 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696E6A70616F726F646B6468626C68796465696C61616F72756B7874706C6B70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770100810.038:481): pid=5536 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770100810.041:482): pid=5536 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100810.199:483): pid=5536 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770100810.199:484): pid=5536 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100810.203:485): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100810.203:486): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100810.215:487): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100810.216:488): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100810.251:489): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100810.251:490): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100810.262:491): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100810.263:492): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100810.294:493): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100810.294:494): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100810.306:495): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100810.306:496): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770100810.370:497): pid=5579 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770100810.371:498): pid=5579 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636764756B6D79676C6E65626561626F646D6E6C78726F6D61686D7373776A78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770100810.371:499): pid=5579 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770100810.374:500): pid=5579 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100810.544:501): pid=5579 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770100810.545:502): pid=5579 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100810.548:503): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100810.548:504): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100810.557:505): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100810.557:506): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100810.587:507): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100810.587:508): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100811.557:509): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100811.558:510): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100811.764:511): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100811.764:512): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100811.781:513): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100811.781:514): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100811.987:515): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100811.987:516): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100812.601:517): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100812.601:518): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100812.631:519): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100812.631:520): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100812.637:521): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100812.637:522): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100812.672:523): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100812.672:524): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100812.682:525): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100812.682:526): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770100812.740:527): pid=5673 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770100812.740:528): pid=5673 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67656275637478636E686D726F7570776C74746A686570677273686162706D61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770100812.740:529): pid=5673 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770100812.742:530): pid=5673 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100812.899:531): pid=5673 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770100812.899:532): pid=5673 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100812.903:533): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100812.903:534): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100812.916:535): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100812.916:536): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100812.949:537): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100812.949:538): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100812.958:539): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100812.958:540): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100812.985:541): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100812.985:542): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100812.998:543): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100812.999:544): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770100813.056:545): pid=5716 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770100813.056:546): pid=5716 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646965637672776F6E766C6A727863666878767A67786E6869747164796A6972203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770100813.057:547): pid=5716 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770100813.059:548): pid=5716 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100813.230:549): pid=5716 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770100813.231:550): pid=5716 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100813.234:551): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100813.234:552): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100813.244:553): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100813.244:554): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100813.272:555): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100813.272:556): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100814.402:557): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100814.402:558): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770100814.458:559): pid=5747 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770100814.459:560): pid=5747 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786670696872787173667A7378786D617A78766877676B787865636A6E70696F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770100814.459:561): pid=5747 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770100814.462:562): pid=5747 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100814.624:563): pid=5747 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770100814.624:564): pid=5747 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100814.628:565): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100814.628:566): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100815.483:567): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100815.483:568): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100815.683:569): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100815.683:570): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100817.271:571): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100817.271:572): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100817.468:573): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100817.469:574): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=SERVICE_STOP msg=audit(1770100834.419:575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770100834.429:576): prog-id=0 op=UNLOAD type=BPF msg=audit(1770100834.429:577): prog-id=0 op=UNLOAD type=BPF msg=audit(1770100834.429:578): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1770100835.700:579): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100835.701:580): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770100835.759:581): pid=5802 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770100835.760:582): pid=5802 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7A63697776636572777272666B6B7575796B7369686C636878756D65716E63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770100835.760:583): pid=5802 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770100835.763:584): pid=5802 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100835.930:585): pid=5802 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770100835.930:586): pid=5802 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100835.934:587): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100835.935:588): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1770100895.996:589): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4187 suid=1000 rport=39110 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1770100895.999:590): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1770100895.999:591): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_SESSION msg=audit(1770100936.296:592): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=5814 suid=74 rport=39890 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770100936.296:593): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=5814 suid=74 rport=39890 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770100936.352:594): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1770100936.370:595): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770100936.370:596): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770100936.401:597): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770100936.401:598): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5814 suid=74 rport=39890 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770100936.403:599): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770100936.403:600): pid=5813 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=3 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1770100936.403:600): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe4ffc0220 a2=4 a3=3e8 items=0 ppid=1134 pid=5813 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=3 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770100936.403:600): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1770100936.404:601): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_START msg=audit(1770100936.421:602): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_ACQ msg=audit(1770100936.424:603): pid=5816 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1770100936.467:604): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100936.467:605): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100936.671:606): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100936.671:607): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100949.468:608): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100949.468:609): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100949.498:610): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100949.498:611): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100949.514:612): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100949.514:613): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100949.548:614): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100949.548:615): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100949.578:616): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100949.578:617): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770100949.639:618): pid=5878 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770100949.639:619): pid=5878 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7374737771736F677372706A686B616A6D6D78646368626D6D69766567746477203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770100949.641:620): pid=5878 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770100949.645:621): pid=5878 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100949.803:622): pid=5878 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770100949.803:623): pid=5878 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100949.807:624): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100949.807:625): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100949.844:626): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100949.845:627): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100949.875:628): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100949.875:629): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100949.889:630): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100949.889:631): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100949.917:632): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100949.917:633): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100949.930:634): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100949.930:635): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770100949.986:636): pid=5921 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770100949.986:637): pid=5921 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D797A76696E65616D6F6B78626972656E62757A6768716E6B79616B6A61687172203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770100949.987:638): pid=5921 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770100949.989:639): pid=5921 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100950.160:640): pid=5921 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770100950.160:641): pid=5921 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100950.164:642): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100950.164:643): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100950.177:644): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100950.177:645): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100950.205:646): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100950.205:647): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770100950.340:648): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100950.340:649): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770100950.395:650): pid=5951 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770100950.395:651): pid=5951 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767376787677726E646E776E6E6A72617278756F70796F6E786F617962726C74203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770100950.396:652): pid=5951 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770100950.399:653): pid=5951 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=SERVICE_STOP msg=audit(1770100950.675:654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100950.705:655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770100950.725:656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100950.762:657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770100950.774:658): prog-id=34 op=LOAD type=BPF msg=audit(1770100950.774:659): prog-id=35 op=LOAD type=USER_END msg=audit(1770100950.791:660): pid=5951 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770100950.791:661): pid=5951 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770100950.795:662): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100950.795:663): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=SERVICE_START msg=audit(1770100950.825:664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770100950.918:665): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770100950.918:666): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770100951.119:667): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770100951.119:668): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=SERVICE_STOP msg=audit(1770100960.979:669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770100980.862:670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770100980.908:671): prog-id=0 op=UNLOAD type=BPF msg=audit(1770100980.908:672): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770100995.835:673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770100995.841:674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770101005.879:675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770101011.184:676): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5816 suid=1000 rport=39890 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1770101011.186:677): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1770101011.186:678): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_SESSION msg=audit(1770101104.305:679): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=6056 suid=74 rport=43980 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770101104.305:680): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=6056 suid=74 rport=43980 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770101104.361:681): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1770101104.378:682): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770101104.378:683): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770101104.409:684): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770101104.409:685): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6056 suid=74 rport=43980 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770101104.411:686): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770101104.411:687): pid=6055 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=4 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1770101104.411:687): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdd41b74d0 a2=4 a3=3e8 items=0 ppid=1134 pid=6055 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770101104.411:687): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1770101104.412:688): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_START msg=audit(1770101104.431:689): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_ACQ msg=audit(1770101104.434:690): pid=6058 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1770101104.476:691): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101104.476:692): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101104.507:693): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101104.507:694): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101104.523:695): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101104.523:696): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101104.557:697): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101104.557:698): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101104.570:699): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101104.570:700): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101104.632:701): pid=6104 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101104.632:702): pid=6104 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64736E7377626D6D707A7365717574746675786A6A7179746164626C6C637167203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101104.633:703): pid=6104 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101104.637:704): pid=6104 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101104.793:705): pid=6104 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101104.794:706): pid=6104 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101104.798:707): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101104.798:708): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101104.816:709): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101104.817:710): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101104.850:711): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101104.850:712): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101104.865:713): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101104.865:714): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101104.897:715): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101104.897:716): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101104.911:717): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101104.911:718): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101104.972:719): pid=6147 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101104.972:720): pid=6147 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686E6B6A717073797A6969637A757A67747379666861677A6A776C64637A6475203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101104.973:721): pid=6147 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101104.975:722): pid=6147 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101105.142:723): pid=6147 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101105.142:724): pid=6147 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101105.146:725): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101105.146:726): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101105.161:727): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101105.161:728): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101105.192:729): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101105.192:730): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1770101108.388:731): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6058 suid=1000 rport=43980 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1770101108.390:732): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1770101108.390:733): pid=6055 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_SESSION msg=audit(1770101152.031:734): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=6166 suid=74 rport=42744 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770101152.031:735): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=6166 suid=74 rport=42744 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770101152.454:736): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6166 suid=74 rport=42744 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770101152.454:737): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770101152.456:738): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770101366.529:739): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=6168 suid=74 rport=47606 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770101366.530:740): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=6168 suid=74 rport=47606 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770101366.933:741): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6168 suid=74 rport=47606 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770101366.934:742): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770101366.935:743): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770101498.410:744): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=6173 suid=74 rport=49222 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770101498.410:745): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=6173 suid=74 rport=49222 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770101498.465:746): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1770101498.483:747): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770101498.483:748): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770101498.513:749): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770101498.513:750): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6173 suid=74 rport=49222 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770101498.515:751): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770101498.515:752): pid=6172 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=5 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1770101498.515:752): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff9094eb60 a2=4 a3=3e8 items=0 ppid=1134 pid=6172 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=5 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770101498.515:752): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1770101498.517:753): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_START msg=audit(1770101498.533:754): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_ACQ msg=audit(1770101498.536:755): pid=6175 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1770101498.579:756): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101498.579:757): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101498.628:758): pid=6189 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101498.628:759): pid=6189 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7663697A656469616C6D6A676F61686E666A6F766869717362697A69687471203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101498.629:760): pid=6189 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101498.633:761): pid=6189 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101498.801:762): pid=6189 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101498.801:763): pid=6189 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101498.805:764): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101498.806:765): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101499.413:766): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101499.413:767): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101499.474:768): pid=6208 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101499.474:769): pid=6208 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77656D67776277757A70797179666A746C666D6362667A6170797A616272616A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101499.475:770): pid=6208 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101499.478:771): pid=6208 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101499.645:772): pid=6208 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101499.645:773): pid=6208 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101499.648:774): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101499.648:775): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101499.673:776): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101499.673:777): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101499.725:778): pid=6224 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101499.725:779): pid=6224 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A666E646877736974686B6E6174657A6C71746F687768616B64647469796A65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101499.725:780): pid=6224 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101499.727:781): pid=6224 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101499.862:782): pid=6224 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101499.862:783): pid=6224 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101499.866:784): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101499.866:785): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101499.880:786): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101499.880:787): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101499.931:788): pid=6240 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101499.932:789): pid=6240 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6B636C78616E7765736C777A6D6873746C6878696F64786378667A69697274203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101499.932:790): pid=6240 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101499.934:791): pid=6240 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101500.127:792): pid=6240 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101500.128:793): pid=6240 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101500.132:794): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101500.132:795): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101500.168:796): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101500.168:797): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101500.228:798): pid=6256 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101500.229:799): pid=6256 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686E61746F7275686E636A7A78707276666C7371636C7A69647469697378686E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101500.229:800): pid=6256 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101500.231:801): pid=6256 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101500.399:802): pid=6256 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101500.399:803): pid=6256 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101500.402:804): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101500.402:805): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101501.499:806): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101501.500:807): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101501.557:808): pid=6272 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101501.557:809): pid=6272 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697A6961647869676668776C70736574676E756F77657279796777676E667577203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101501.558:810): pid=6272 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101501.561:811): pid=6272 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101501.754:812): pid=6272 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101501.755:813): pid=6272 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101501.757:814): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101501.757:815): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101502.095:816): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101502.095:817): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101502.121:818): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101502.122:819): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101502.129:820): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101502.129:821): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101502.161:822): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101502.161:823): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101502.173:824): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101502.173:825): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101502.224:826): pid=6320 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101502.224:827): pid=6320 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656274677A7A786162706F6F7A7772696B6E6C64617071666A6377666E717764203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101502.224:828): pid=6320 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101502.226:829): pid=6320 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101502.395:830): pid=6320 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101502.395:831): pid=6320 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101502.398:832): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101502.399:833): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101502.418:834): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101502.418:835): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101502.450:836): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101502.450:837): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101502.460:838): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101502.460:839): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101502.487:840): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101502.487:841): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101502.496:842): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101502.496:843): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101502.550:844): pid=6363 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101502.550:845): pid=6363 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F666D69766F6E7375797A696A6174797263737A696F7274797277676E6A7675203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101502.550:846): pid=6363 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101502.553:847): pid=6363 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101502.728:848): pid=6363 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101502.728:849): pid=6363 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101502.732:850): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101502.732:851): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101502.744:852): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101502.744:853): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101502.766:854): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101502.766:855): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101504.054:856): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101504.054:857): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101504.108:858): pid=6393 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101504.108:859): pid=6393 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6475626A71786D6A757A6F796B697A6974727A6D6C6767726A796A6F706A6C65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101504.109:860): pid=6393 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101504.111:861): pid=6393 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=BPF msg=audit(1770101504.532:862): prog-id=36 op=LOAD type=BPF msg=audit(1770101504.532:863): prog-id=0 op=UNLOAD type=BPF msg=audit(1770101504.533:864): prog-id=37 op=LOAD type=BPF msg=audit(1770101504.533:865): prog-id=0 op=UNLOAD type=BPF msg=audit(1770101504.534:866): prog-id=38 op=LOAD type=BPF msg=audit(1770101504.534:867): prog-id=0 op=UNLOAD type=BPF msg=audit(1770101504.534:868): prog-id=39 op=LOAD type=BPF msg=audit(1770101504.534:869): prog-id=40 op=LOAD type=BPF msg=audit(1770101504.534:870): prog-id=0 op=UNLOAD type=BPF msg=audit(1770101504.534:871): prog-id=0 op=UNLOAD type=BPF msg=audit(1770101504.535:872): prog-id=41 op=LOAD type=BPF msg=audit(1770101504.536:873): prog-id=42 op=LOAD type=BPF msg=audit(1770101504.536:874): prog-id=0 op=UNLOAD type=BPF msg=audit(1770101504.536:875): prog-id=0 op=UNLOAD type=BPF msg=audit(1770101504.537:876): prog-id=43 op=LOAD type=BPF msg=audit(1770101504.537:877): prog-id=0 op=UNLOAD type=BPF msg=audit(1770101504.537:878): prog-id=44 op=LOAD type=BPF msg=audit(1770101504.537:879): prog-id=45 op=LOAD type=BPF msg=audit(1770101504.537:880): prog-id=0 op=UNLOAD type=BPF msg=audit(1770101504.537:881): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770101504.567:882): pid=6393 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101504.568:883): pid=6393 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101504.572:884): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101504.572:885): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101505.874:886): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101505.874:887): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101505.936:888): pid=6439 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101505.936:889): pid=6439 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687769707078776F68647475637465717279666F676978747A786F7A776F646B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101505.937:890): pid=6439 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101505.940:891): pid=6439 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101506.107:892): pid=6439 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101506.107:893): pid=6439 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101506.111:894): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101506.111:895): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101506.479:896): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101506.479:897): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101506.537:898): pid=6455 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101506.537:899): pid=6455 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646F7A657A75687374746E6D6265647A6D6965686F6565687670647575696567203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101506.538:900): pid=6455 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101506.541:901): pid=6455 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101506.707:902): pid=6455 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101506.707:903): pid=6455 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101506.711:904): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101506.711:905): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101506.741:906): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101506.741:907): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101506.803:908): pid=6473 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101506.803:909): pid=6473 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64726A637062666D7061766C636272736275697174626D727A67616A746B7073203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101506.804:910): pid=6473 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101506.806:911): pid=6473 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101506.972:912): pid=6473 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101506.973:913): pid=6473 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101506.976:914): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101506.976:915): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101507.008:916): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101507.008:917): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101507.065:918): pid=6491 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101507.066:919): pid=6491 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7362616B75716C67666E68727A72777A6C68687375716A6E776B64647877716E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101507.066:920): pid=6491 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101507.069:921): pid=6491 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101507.243:922): pid=6491 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101507.244:923): pid=6491 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101507.248:924): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101507.248:925): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101507.277:926): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101507.278:927): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101507.334:928): pid=6509 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101507.334:929): pid=6509 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786172727161747870666D70696275696C7A6B6479696A6C617575726B6D7A7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101507.335:930): pid=6509 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101507.337:931): pid=6509 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101507.503:932): pid=6509 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101507.503:933): pid=6509 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101507.507:934): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101507.507:935): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101508.835:936): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101508.835:937): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101509.043:938): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101509.043:939): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101509.609:940): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101509.609:941): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101509.801:942): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101509.802:943): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1770101513.199:944): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6175 suid=1000 rport=49222 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1770101513.202:945): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1770101513.203:946): pid=6172 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_SESSION msg=audit(1770101573.131:947): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=6554 suid=74 rport=41900 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770101573.131:948): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=6554 suid=74 rport=41900 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770101573.540:949): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6554 suid=74 rport=41900 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770101573.541:950): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770101573.541:951): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770101586.002:952): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=6558 suid=74 rport=41594 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770101586.002:953): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=6558 suid=74 rport=41594 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770101586.059:954): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1770101586.082:955): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770101586.082:956): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770101586.111:957): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770101586.112:958): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6558 suid=74 rport=41594 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770101586.114:959): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770101586.114:960): pid=6557 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=6 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1770101586.114:960): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffff54fd070 a2=4 a3=3e8 items=0 ppid=1134 pid=6557 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770101586.114:960): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1770101586.115:961): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_START msg=audit(1770101586.131:962): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_ACQ msg=audit(1770101586.134:963): pid=6560 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1770101586.177:964): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101586.177:965): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101586.244:966): pid=6574 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101586.245:967): pid=6574 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6A687A7A6A6E6B6E6E77716C6379717263656471656B62756B677077797961203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101586.246:968): pid=6574 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101586.250:969): pid=6574 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=SERVICE_START msg=audit(1770101587.467:970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rhsm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770101591.435:971): pid=6574 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101591.436:972): pid=6574 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101591.440:973): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101591.440:974): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101592.912:975): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101592.912:976): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101593.123:977): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101593.123:978): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101593.579:979): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101593.580:980): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101593.645:981): pid=6689 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101593.645:982): pid=6689 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746178786E71616273687A79746A656F6875736C66727A77737275766E616777203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101593.647:983): pid=6689 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101593.651:984): pid=6689 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRYPTO_SESSION msg=audit(1770101599.105:985): pid=6695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=6696 suid=74 rport=51417 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=65.49.1.222 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770101599.105:986): pid=6695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=6696 suid=74 rport=51417 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=65.49.1.222 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770101602.962:987): pid=6695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6696 suid=74 rport=51417 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=65.49.1.222 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770101602.963:988): pid=6695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=65.49.1.222 addr=65.49.1.222 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770101602.963:989): pid=6695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=65.49.1.222 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770101638.900:990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770101638.901:991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=MAC_CONFIG_CHANGE msg=audit(1770101640.978:992): bool=virt_use_nfs val=1 old_val=0 auid=1000 ses=6AUID="zuul" type=SYSCALL msg=audit(1770101640.978:992): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fff4574e5ae a2=2 a3=0 items=0 ppid=6769 pid=6770 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:setsebool_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770101640.978:992): proctitle=2F7573722F7362696E2F7365747365626F6F6C002D50002D4E00766972745F7573655F6E66733D3100766972745F73616E64626F785F7573655F616C6C5F636170733D31 type=MAC_POLICY_LOAD msg=audit(1770101650.442:993): auid=1000 ses=6 lsm=selinux res=1AUID="zuul" type=SYSCALL msg=audit(1770101650.442:993): arch=c000003e syscall=1 success=yes exit=3537292 a0=4 a1=7fda59a00000 a2=35f98c a3=0 items=0 ppid=6769 pid=6784 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770101650.442:993): proctitle="/usr/sbin/load_policy" type=SERVICE_START msg=audit(1770101663.142:994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r90d8dc30a2fe417a89f5a8a8af30a74e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770101663.372:995): prog-id=46 op=LOAD type=BPF msg=audit(1770101663.372:996): prog-id=0 op=UNLOAD type=BPF msg=audit(1770101663.373:997): prog-id=47 op=LOAD type=BPF msg=audit(1770101663.373:998): prog-id=0 op=UNLOAD type=BPF msg=audit(1770101663.374:999): prog-id=48 op=LOAD type=BPF msg=audit(1770101663.374:1000): prog-id=0 op=UNLOAD type=BPF msg=audit(1770101663.375:1001): prog-id=49 op=LOAD type=BPF msg=audit(1770101663.375:1002): prog-id=50 op=LOAD type=BPF msg=audit(1770101663.375:1003): prog-id=0 op=UNLOAD type=BPF msg=audit(1770101663.375:1004): prog-id=0 op=UNLOAD type=BPF msg=audit(1770101663.376:1005): prog-id=51 op=LOAD type=BPF msg=audit(1770101663.376:1006): prog-id=52 op=LOAD type=BPF msg=audit(1770101663.376:1007): prog-id=0 op=UNLOAD type=BPF msg=audit(1770101663.376:1008): prog-id=0 op=UNLOAD type=BPF msg=audit(1770101663.378:1009): prog-id=53 op=LOAD type=BPF msg=audit(1770101663.378:1010): prog-id=0 op=UNLOAD type=BPF msg=audit(1770101663.378:1011): prog-id=54 op=LOAD type=BPF msg=audit(1770101663.378:1012): prog-id=55 op=LOAD type=BPF msg=audit(1770101663.378:1013): prog-id=0 op=UNLOAD type=BPF msg=audit(1770101663.378:1014): prog-id=0 op=UNLOAD type=SOFTWARE_UPDATE msg=audit(1770101663.404:1015): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="container-selinux-3:2.229.0-1.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1016): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-libs-3.10.2-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1017): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="protobuf-c-1.3.3-12.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1018): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnftnl-1.2.2-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1019): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-nft-1.8.8-6.el9_1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1020): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nftables-1:1.0.4-10.el9_1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1021): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="conmon-2:2.1.7-1.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1022): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="aardvark-dns-2:1.5.0-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1023): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="netavark-2:1.5.1-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1024): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="yajl-2.1.0-21.el9_0.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1025): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnet-1.2-6.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1026): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="criu-3.17-5.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1027): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="criu-libs-3.17-5.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1028): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="crun-1.8.4-1.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1029): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libslirp-4.4.0-7.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1030): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="slirp4netns-1.2.0-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1031): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="shadow-utils-subid-2:4.9-6.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1032): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-common-3.10.2-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1033): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-3.10.2-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1034): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-overlayfs-1.11-1.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1035): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="containers-common-2:1-52.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770101663.404:1036): pid=6691 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="podman-2:4.4.1-22.el9_2.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=USER_END msg=audit(1770101664.665:1037): pid=6689 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101664.665:1038): pid=6689 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101664.671:1039): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101664.671:1040): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101667.622:1041): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101667.622:1042): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101667.686:1043): pid=13415 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101667.687:1044): pid=13415 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6977716D7576756C786F616E7371736B6C63636D64746F64756469707775706F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101667.688:1045): pid=13415 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101667.693:1046): pid=13415 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101668.471:1047): pid=13415 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101668.471:1048): pid=13415 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101668.476:1049): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101668.476:1050): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101668.517:1051): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101668.517:1052): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101669.387:1053): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101669.387:1054): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1770101669.763:1055): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6560 suid=1000 rport=41594 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1770101669.766:1056): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1770101669.767:1057): pid=6557 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=SERVICE_START msg=audit(1770101671.632:1058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770101671.632:1059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770101671.634:1060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r90d8dc30a2fe417a89f5a8a8af30a74e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770101683.994:1061): pid=18427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770101683.997:1062): pid=18426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=18431 suid=74 rport=44328 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770101683.997:1063): pid=18426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=18431 suid=74 rport=44328 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770101684.007:1064): pid=18426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18431 suid=74 rport=44328 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1770101684.008:1065): pid=18426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770101684.010:1066): pid=18428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=18432 suid=74 rport=44332 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770101684.010:1067): pid=18428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=18432 suid=74 rport=44332 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770101684.012:1068): pid=18428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18432 suid=74 rport=44332 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1770101684.013:1069): pid=18428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770101684.015:1070): pid=18425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770101684.018:1071): pid=18429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770101688.611:1072): pid=18435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=18436 suid=74 rport=43094 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770101688.611:1073): pid=18435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=18436 suid=74 rport=43094 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770101688.667:1074): pid=18435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1770101688.684:1075): pid=18435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770101688.684:1076): pid=18435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770101688.714:1077): pid=18435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770101688.714:1078): pid=18435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18436 suid=74 rport=43094 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770101688.716:1079): pid=18435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770101688.716:1080): pid=18435 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=7 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1770101688.716:1080): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff40015710 a2=4 a3=3e8 items=0 ppid=1134 pid=18435 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770101688.716:1080): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1770101688.718:1081): pid=18435 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_START msg=audit(1770101688.737:1082): pid=18435 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_ACQ msg=audit(1770101688.740:1083): pid=18438 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1770101688.782:1084): pid=18435 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101688.782:1085): pid=18435 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101689.027:1086): pid=18435 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101689.027:1087): pid=18435 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101689.702:1088): pid=18435 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101689.702:1089): pid=18435 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101689.765:1090): pid=18466 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101689.766:1091): pid=18466 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A74686877766271776764626979626F6B6F7074776C61747761616370667978203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101689.766:1092): pid=18466 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101689.770:1093): pid=18466 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101689.990:1094): pid=18466 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101689.990:1095): pid=18466 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101689.994:1096): pid=18435 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101689.994:1097): pid=18435 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1770101691.664:1098): pid=18435 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18438 suid=1000 rport=43094 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1770101691.666:1099): pid=18435 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1770101691.667:1100): pid=18435 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=SERVICE_START msg=audit(1770101764.374:1101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770101764.374:1102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770101772.517:1103): pid=18476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=18477 suid=74 rport=42836 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770101772.517:1104): pid=18476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=18477 suid=74 rport=42836 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770101772.574:1105): pid=18476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1770101772.590:1106): pid=18476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770101772.590:1107): pid=18476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770101772.620:1108): pid=18476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770101772.620:1109): pid=18476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18477 suid=74 rport=42836 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770101772.622:1110): pid=18476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770101772.622:1111): pid=18476 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=8 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1770101772.622:1111): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd5d724420 a2=4 a3=3e8 items=0 ppid=1134 pid=18476 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770101772.622:1111): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1770101772.623:1112): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_START msg=audit(1770101772.640:1113): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_ACQ msg=audit(1770101772.642:1114): pid=18479 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1770101772.685:1115): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101772.685:1116): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101772.750:1117): pid=18493 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101772.750:1118): pid=18493 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796A78697465656764706463617A6B6A67787A636C6F7A7A76736E6773616D71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101772.752:1119): pid=18493 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101772.756:1120): pid=18493 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101772.971:1121): pid=18493 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101772.971:1122): pid=18493 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101772.975:1123): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101772.975:1124): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101773.793:1125): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101773.793:1126): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101773.854:1127): pid=18509 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101773.854:1128): pid=18509 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656865677A6B7061727869736F73777763776A777166737765756578687A6179203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101773.855:1129): pid=18509 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101773.857:1130): pid=18509 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101774.068:1131): pid=18509 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101774.068:1132): pid=18509 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101774.070:1133): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101774.070:1134): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101774.485:1135): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101774.485:1136): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101774.507:1137): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101774.507:1138): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101774.516:1139): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101774.516:1140): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101774.543:1141): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101774.543:1142): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101774.693:1143): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101774.693:1144): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101774.747:1145): pid=18559 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101774.747:1146): pid=18559 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776E6C6270736F636E7771776F6B67677174726E70767262626E656565646C63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101774.748:1147): pid=18559 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101774.751:1148): pid=18559 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101774.913:1149): pid=18559 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101774.914:1150): pid=18559 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101774.917:1151): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101774.918:1152): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101774.947:1153): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101774.948:1154): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101774.981:1155): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101774.982:1156): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101774.993:1157): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101774.993:1158): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101775.023:1159): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101775.023:1160): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101775.151:1161): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101775.151:1162): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101775.207:1163): pid=18602 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101775.208:1164): pid=18602 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F69666E647471706A6B667668666C72686A736771676B71646A7A6C75737175203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101775.208:1165): pid=18602 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101775.211:1166): pid=18602 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101775.387:1167): pid=18602 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101775.387:1168): pid=18602 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101775.391:1169): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101775.391:1170): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101775.401:1171): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101775.401:1172): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101775.428:1173): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101775.428:1174): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101776.281:1175): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101776.281:1176): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101776.310:1177): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101776.310:1178): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101776.318:1179): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101776.319:1180): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101776.353:1181): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101776.354:1182): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101776.363:1183): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101776.363:1184): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101776.420:1185): pid=18664 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101776.420:1186): pid=18664 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7862687867757876696C6A716C7A616D7A7A6B68696E77706C707962786E7478203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101776.421:1187): pid=18664 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101776.423:1188): pid=18664 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101776.579:1189): pid=18664 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101776.579:1190): pid=18664 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101776.584:1191): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101776.584:1192): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101776.611:1193): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101776.611:1194): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101776.647:1195): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101776.647:1196): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101776.655:1197): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101776.656:1198): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101776.686:1199): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101776.686:1200): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101776.694:1201): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101776.694:1202): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101776.753:1203): pid=18707 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101776.753:1204): pid=18707 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E65616B71676F65616A70636E726272726F646F61617A6E6B626F6174667A72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101776.754:1205): pid=18707 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101776.756:1206): pid=18707 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101776.922:1207): pid=18707 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101776.922:1208): pid=18707 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101776.926:1209): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101776.926:1210): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101776.947:1211): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101776.947:1212): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101776.972:1213): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101776.973:1214): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101778.953:1215): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101778.953:1216): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770101779.007:1217): pid=18737 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770101779.007:1218): pid=18737 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74666468796979686C6162776F7A746E69726F6F717777707367726F6A61716B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770101779.008:1219): pid=18737 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770101779.010:1220): pid=18737 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRYPTO_SESSION msg=audit(1770101779.112:1221): pid=18738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=18740 suid=74 rport=38458 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770101779.112:1222): pid=18738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=18740 suid=74 rport=38458 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_END msg=audit(1770101779.146:1223): pid=18737 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770101779.147:1224): pid=18737 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770101779.150:1225): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101779.150:1226): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1770101779.555:1227): pid=18738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18740 suid=74 rport=38458 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770101779.556:1228): pid=18738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770101779.556:1229): pid=18738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770101779.573:1230): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101779.573:1231): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101779.598:1232): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101779.598:1233): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101779.612:1234): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101779.612:1235): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101779.642:1236): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101779.642:1237): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101779.652:1238): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101779.652:1239): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101779.842:1240): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101779.842:1241): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101779.856:1242): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101779.857:1243): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101780.056:1244): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101780.056:1245): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101780.070:1246): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101780.070:1247): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101780.100:1248): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101780.100:1249): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101780.893:1250): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101780.893:1251): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101780.921:1252): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101780.921:1253): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101780.928:1254): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101780.928:1255): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101780.961:1256): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101780.961:1257): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101780.970:1258): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101780.970:1259): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101781.189:1260): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101781.189:1261): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101781.207:1262): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101781.207:1263): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101781.397:1264): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101781.397:1265): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101781.406:1266): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101781.406:1267): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101781.435:1268): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101781.435:1269): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101782.673:1270): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101782.673:1271): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101782.702:1272): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101782.702:1273): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101782.713:1274): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101782.713:1275): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101782.753:1276): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101782.753:1277): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101782.762:1278): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101782.763:1279): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101782.973:1280): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101782.973:1281): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101782.982:1282): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101782.982:1283): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101783.132:1284): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101783.132:1285): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101783.146:1286): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101783.146:1287): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101783.174:1288): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101783.174:1289): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1770101785.182:1290): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18479 suid=1000 rport=42836 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1770101785.186:1291): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1770101785.187:1292): pid=18476 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_SESSION msg=audit(1770101904.999:1293): pid=18970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=ecdh-sha2-nistp256 spid=18971 suid=74 rport=55266 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770101904.999:1294): pid=18970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=ecdh-sha2-nistp256 spid=18971 suid=74 rport=55266 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770101905.065:1295): pid=18970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770101905.065:1296): pid=18970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770101905.095:1297): pid=18970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.132 addr=38.102.83.132 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770101905.095:1298): pid=18970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18971 suid=74 rport=55266 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770101905.097:1299): pid=18970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.132 addr=38.102.83.132 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770101905.097:1300): pid=18970 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=9 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1770101905.097:1300): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdaabefdd0 a2=4 a3=3e8 items=0 ppid=1134 pid=18970 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770101905.097:1300): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1770101905.098:1301): pid=18970 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.132 addr=38.102.83.132 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_START msg=audit(1770101905.114:1302): pid=18970 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.132 addr=38.102.83.132 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_ACQ msg=audit(1770101905.117:1303): pid=18973 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.132 addr=38.102.83.132 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1770101905.159:1304): pid=18970 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101905.159:1305): pid=18970 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101905.189:1306): pid=18970 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101905.189:1307): pid=18970 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101905.206:1308): pid=18970 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101905.206:1309): pid=18970 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101905.280:1310): pid=18970 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101905.280:1311): pid=18970 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770101905.299:1312): pid=18970 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770101905.299:1313): pid=18970 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770101905.463:1314): pid=18970 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770101905.463:1315): pid=18970 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_SESSION msg=audit(1770101978.549:1316): pid=19019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=19020 suid=74 rport=49602 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770101978.549:1317): pid=19019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=19020 suid=74 rport=49602 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770101978.974:1318): pid=19019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19020 suid=74 rport=49602 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770101978.975:1319): pid=19019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770101978.976:1320): pid=19019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770102187.129:1321): pid=19037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=19038 suid=74 rport=34240 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770102187.129:1322): pid=19037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=19038 suid=74 rport=34240 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770102187.571:1323): pid=19037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19038 suid=74 rport=34240 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770102187.571:1324): pid=19037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770102187.572:1325): pid=19037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770102205.267:1326): pid=18970 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18973 suid=1000 rport=55266 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.132 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1770102205.271:1327): pid=18970 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.132 addr=38.102.83.132 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1770102205.271:1328): pid=18970 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.132 addr=38.102.83.132 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_SESSION msg=audit(1770102392.342:1329): pid=19161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=19162 suid=74 rport=53846 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770102392.342:1330): pid=19161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=19162 suid=74 rport=53846 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770102392.747:1331): pid=19161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19162 suid=74 rport=53846 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770102392.748:1332): pid=19161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770102392.749:1333): pid=19161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770102554.074:1334): pid=19164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=19165 suid=74 rport=35592 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770102554.074:1335): pid=19164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=19165 suid=74 rport=35592 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770102554.130:1336): pid=19164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1770102554.159:1337): pid=19164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770102554.159:1338): pid=19164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770102554.189:1339): pid=19164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770102554.189:1340): pid=19164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19165 suid=74 rport=35592 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770102554.192:1341): pid=19164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770102554.192:1342): pid=19164 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=10 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1770102554.192:1342): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc35c82f90 a2=4 a3=3e8 items=0 ppid=1134 pid=19164 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770102554.192:1342): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1770102554.193:1343): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_START msg=audit(1770102554.210:1344): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_ACQ msg=audit(1770102554.213:1345): pid=19167 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1770102554.256:1346): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102554.256:1347): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770102554.461:1348): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102554.461:1349): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102555.193:1350): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102555.193:1351): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102555.251:1352): pid=19199 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102555.251:1353): pid=19199 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726F66797972766F637377646F646169627A646A776271706A6C657862786C67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102555.252:1354): pid=19199 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102555.255:1355): pid=19199 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102557.478:1356): pid=19199 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102557.478:1357): pid=19199 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102557.482:1358): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102557.482:1359): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102557.960:1360): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102557.960:1361): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102558.007:1362): pid=19219 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102558.007:1363): pid=19219 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64706C616F7565767471746E6A7264617776657178676E716D617565686E6566203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102558.008:1364): pid=19219 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102558.011:1365): pid=19219 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102585.383:1366): pid=19219 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102585.383:1367): pid=19219 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102585.387:1368): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102585.387:1369): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102586.959:1370): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102586.959:1371): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102587.020:1372): pid=19434 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102587.020:1373): pid=19434 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7A686571727671737165686274696A72636B706861646C6F7068636A67786E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102587.021:1374): pid=19434 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102587.024:1375): pid=19434 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102591.869:1376): pid=19434 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102591.870:1377): pid=19434 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102591.873:1378): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102591.873:1379): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102592.274:1380): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102592.274:1381): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102592.333:1382): pid=19574 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102592.333:1383): pid=19574 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666C7A6B716E7A6C6C746D716C6B7178766D7769796A6B64766D6D63616F6763203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102592.334:1384): pid=19574 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102592.336:1385): pid=19574 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRYPTO_SESSION msg=audit(1770102603.112:1386): pid=19946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=19947 suid=74 rport=60454 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770102603.112:1387): pid=19946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=19947 suid=74 rport=60454 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770102603.520:1388): pid=19946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19947 suid=74 rport=60454 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770102603.521:1389): pid=19946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770102603.521:1390): pid=19946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1770102606.687:1391): pid=19574 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102606.687:1392): pid=19574 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102606.692:1393): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102606.692:1394): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102609.290:1395): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102609.290:1396): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102609.349:1397): pid=19968 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102609.349:1398): pid=19968 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7A62737279646C71736F6D63706F666666726B686568656A6B616168686376203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102609.351:1399): pid=19968 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102609.355:1400): pid=19968 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102623.394:1401): pid=19968 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102623.394:1402): pid=19968 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102623.398:1403): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102623.398:1404): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102625.163:1405): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102625.163:1406): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102625.220:1407): pid=20302 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102625.220:1408): pid=20302 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656668746C766C71656C7578656D7A62626E6F62736A666B77796F6D73726B75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102625.220:1409): pid=20302 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102625.223:1410): pid=20302 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102640.159:1411): pid=20302 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102640.159:1412): pid=20302 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102640.163:1413): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102640.163:1414): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102640.786:1415): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102640.786:1416): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102640.841:1417): pid=20638 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102640.841:1418): pid=20638 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6474746764667668666F6F7A69686E73776D716F776E686164677777796A68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102640.841:1419): pid=20638 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102640.843:1420): pid=20638 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102643.042:1421): pid=20638 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102643.043:1422): pid=20638 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102643.047:1423): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102643.047:1424): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102643.516:1425): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102643.516:1426): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102643.570:1427): pid=20657 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102643.571:1428): pid=20657 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7562696B7A796B6E6C657970687672746C767A737669736D6D696669786278203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102643.571:1429): pid=20657 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102643.574:1430): pid=20657 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=ADD_GROUP msg=audit(1770102658.170:1431): pid=20745 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="unbound" type=GRP_MGMT msg=audit(1770102658.175:1432): pid=20745 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="unbound" type=ADD_USER msg=audit(1770102658.229:1433): pid=20752 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="unbound" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=MAC_POLICY_LOAD msg=audit(1770102666.809:1434): auid=1000 ses=10 lsm=selinux res=1AUID="zuul" type=SYSCALL msg=audit(1770102666.809:1434): arch=c000003e syscall=1 success=yes exit=3540283 a0=4 a1=7f0c98200000 a2=36053b a3=0 items=0 ppid=20769 pid=20779 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770102666.809:1434): proctitle="/usr/sbin/load_policy" type=ADD_GROUP msg=audit(1770102666.976:1435): pid=20782 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=986 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="openvswitch" type=GRP_MGMT msg=audit(1770102666.979:1436): pid=20782 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=986 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="openvswitch" type=ADD_USER msg=audit(1770102667.030:1437): pid=20789 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="openvswitch" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=ADD_GROUP msg=audit(1770102667.123:1438): pid=20797 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=985 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="hugetlbfs" type=GRP_MGMT msg=audit(1770102667.127:1439): pid=20797 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=985 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="hugetlbfs" type=USER_MGMT msg=audit(1770102667.178:1440): pid=20805 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="hugetlbfs" acct="openvswitch" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=USER_MGMT msg=audit(1770102667.178:1441): pid=20805 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-shadow-group grp="hugetlbfs" acct="openvswitch" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SERVICE_START msg=audit(1770102670.312:1442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rdf1213c1e4264f1c864cd074daed0f20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770102670.553:1443): prog-id=56 op=LOAD type=BPF msg=audit(1770102670.553:1444): prog-id=0 op=UNLOAD type=BPF msg=audit(1770102670.554:1445): prog-id=57 op=LOAD type=BPF msg=audit(1770102670.554:1446): prog-id=0 op=UNLOAD type=BPF msg=audit(1770102670.555:1447): prog-id=58 op=LOAD type=BPF msg=audit(1770102670.555:1448): prog-id=0 op=UNLOAD type=BPF msg=audit(1770102670.555:1449): prog-id=59 op=LOAD type=BPF msg=audit(1770102670.555:1450): prog-id=60 op=LOAD type=BPF msg=audit(1770102670.555:1451): prog-id=0 op=UNLOAD type=BPF msg=audit(1770102670.555:1452): prog-id=0 op=UNLOAD type=BPF msg=audit(1770102670.557:1453): prog-id=61 op=LOAD type=BPF msg=audit(1770102670.557:1454): prog-id=62 op=LOAD type=BPF msg=audit(1770102670.557:1455): prog-id=0 op=UNLOAD type=BPF msg=audit(1770102670.557:1456): prog-id=0 op=UNLOAD type=BPF msg=audit(1770102670.558:1457): prog-id=63 op=LOAD type=BPF msg=audit(1770102670.558:1458): prog-id=0 op=UNLOAD type=BPF msg=audit(1770102670.558:1459): prog-id=64 op=LOAD type=BPF msg=audit(1770102670.558:1460): prog-id=65 op=LOAD type=BPF msg=audit(1770102670.558:1461): prog-id=0 op=UNLOAD type=BPF msg=audit(1770102670.558:1462): prog-id=0 op=UNLOAD type=SOFTWARE_UPDATE msg=audit(1770102670.603:1463): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-netaddr-0.8.0-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.603:1464): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="git-core-2.39.5-1.el9_2.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.603:1465): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pbr-5.5.1-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.603:1466): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="NetworkManager-config-server-1:1.42.2-32.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.603:1467): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="NetworkManager-ovs-1:1.42.2-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.603:1468): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyparsing-2.4.7-9.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.603:1469): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="chkconfig-1.20-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.603:1470): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-iso8601-0.1.12-5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.603:1471): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-packaging-20.9-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.603:1472): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nmstate-libs-2.2.39-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.603:1473): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-libnmstate-2.2.39-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.603:1474): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nmstate-2.2.39-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.603:1475): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="unbound-libs-1.16.2-3.el9_2.4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.603:1476): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nispor-1.2.10-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.603:1477): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mstflint-4.23.0-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.603:1478): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sshpass-1.09-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.603:1479): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-greenlet-1.1.2-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.603:1480): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openvswitch-selinux-extra-policy-1.0-39.el9fdp.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.603:1481): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openvswitch3.3-3.3.6-141.el9fdp.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1482): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-ply-3.11-14.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1483): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pycparser-2.20-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1484): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cffi-1.14.5-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1485): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cryptography-36.0.1-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1486): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-eventlet-0.30.2-6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1487): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bc-1.07.1-14.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1488): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="initscripts-rename-device-10.11.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1489): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="initscripts-10.11.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1490): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-network-scripts-10.11.1-9.17_1.1.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1491): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-network-scripts-openvswitch3.3-10.11.1-9.17_1.1.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1492): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rhosp-network-scripts-openvswitch-3.3-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1493): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-zipp-3.4.0-5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1494): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-importlib-metadata-1.7.0-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1495): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-stevedore-3.3.3-17.1.20230621041426.7b48fff.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1496): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-wrapt-1.12.1-6.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1497): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-debtcollector-2.2.0-17.1.20230620164104.649189d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1498): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-rfc3986-1.4.0-7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1499): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-anyjson-0.3.3-26.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1500): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyroute2-0.6.6-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1501): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-utils-lang-4.8.2-17.1.20230621020317.a38b56a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.604:1502): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-i18n-lang-5.0.1-17.1.20230621104020.73187bd.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.605:1503): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-i18n-5.0.1-17.1.20230621104020.73187bd.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.605:1504): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-config-2:8.5.1-17.1.20230621105008.de1dbee.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.605:1505): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-utils-4.8.2-17.1.20230621020317.a38b56a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.605:1506): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-concurrency-lang-4.4.0-17.1.20230620204443.7dcf9e9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.605:1507): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-fasteners-0.14.1-24.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.605:1508): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-concurrency-4.4.0-17.1.20230620204443.7dcf9e9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.605:1509): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-net-config-14.2.1-17.1.20251114150843.61d7bd7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.605:1510): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rhosp-openvswitch-3.3-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SOFTWARE_UPDATE msg=audit(1770102670.605:1511): pid=20659 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-ansible-core-2.14.2-4.7.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SERVICE_START msg=audit(1770102671.446:1512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770102671.446:1513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770102671.448:1514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rdf1213c1e4264f1c864cd074daed0f20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770102672.134:1515): pid=20657 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102672.134:1516): pid=20657 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102672.138:1517): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102672.138:1518): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102672.680:1519): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102672.680:1520): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102672.743:1521): pid=21868 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102672.744:1522): pid=21868 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75746D6278776B67777762786C7969687761706E637368696A727072636B6263203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102672.746:1523): pid=21868 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102672.753:1524): pid=21868 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102686.995:1525): pid=21868 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102686.996:1526): pid=21868 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102686.999:1527): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102686.999:1528): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102688.556:1529): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102688.556:1530): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102688.615:1531): pid=21888 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102688.616:1532): pid=21888 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D61716A707778716C6E66736B6D6B71786F6B70786F6B766E61676273637A76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102688.616:1533): pid=21888 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102688.619:1534): pid=21888 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102688.790:1535): pid=21888 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102688.790:1536): pid=21888 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102688.794:1537): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102688.794:1538): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102688.935:1539): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102688.935:1540): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770102688.965:1541): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102688.966:1542): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102688.972:1543): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102688.973:1544): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770102689.007:1545): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102689.007:1546): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102689.139:1547): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102689.139:1548): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102689.197:1549): pid=21936 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102689.197:1550): pid=21936 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696F6D616364627177706C787161646771786A6770636B757A6469726F79746F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102689.198:1551): pid=21936 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102689.200:1552): pid=21936 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102689.362:1553): pid=21936 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102689.362:1554): pid=21936 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102689.368:1555): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102689.368:1556): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102689.382:1557): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102689.382:1558): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770102689.408:1559): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102689.408:1560): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102689.419:1561): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102689.419:1562): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770102689.440:1563): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102689.440:1564): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102689.583:1565): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102689.584:1566): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102689.634:1567): pid=21979 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102689.634:1568): pid=21979 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63756B63796661726A676A6564657476687771756A7062766B6D6E777A757976203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102689.635:1569): pid=21979 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102689.638:1570): pid=21979 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102689.770:1571): pid=21979 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102689.770:1572): pid=21979 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102689.773:1573): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102689.774:1574): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102689.788:1575): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102689.788:1576): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770102689.815:1577): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102689.815:1578): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102690.094:1579): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102690.094:1580): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102690.147:1581): pid=22009 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102690.147:1582): pid=22009 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746D67646A6E6F636667656B62756C696C646C756A6B626F78797265786A6778203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102690.148:1583): pid=22009 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102690.151:1584): pid=22009 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102690.364:1585): pid=22009 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102690.364:1586): pid=22009 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102690.368:1587): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102690.368:1588): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102690.408:1589): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102690.408:1590): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102690.458:1591): pid=22030 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102690.458:1592): pid=22030 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75646162626B6C79756C667069656F796866687974706A727668776476707965203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102690.458:1593): pid=22030 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102690.460:1594): pid=22030 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102690.671:1595): pid=22030 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102690.671:1596): pid=22030 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102690.675:1597): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102690.675:1598): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102690.717:1599): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102690.717:1600): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102690.774:1601): pid=22050 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102690.774:1602): pid=22050 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766D6E6D686979656A6C786B75776572756D766C797968776D6E6F7268707079203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102690.775:1603): pid=22050 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102690.777:1604): pid=22050 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102690.993:1605): pid=22050 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102690.993:1606): pid=22050 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102690.997:1607): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102690.997:1608): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102691.030:1609): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102691.030:1610): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102691.072:1611): pid=22070 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102691.072:1612): pid=22070 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6161757675746B72617676697565677A65716E676174736E7377796D787A6262203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102691.073:1613): pid=22070 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102691.075:1614): pid=22070 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102691.237:1615): pid=22070 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102691.238:1616): pid=22070 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102691.242:1617): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102691.242:1618): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102691.272:1619): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102691.272:1620): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102691.320:1621): pid=22090 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102691.320:1622): pid=22090 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746A6861617A68667072656F75786D637672746A73706A636973736578697266203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102691.321:1623): pid=22090 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102691.324:1624): pid=22090 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102691.513:1625): pid=22090 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102691.514:1626): pid=22090 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102691.517:1627): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102691.517:1628): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102692.994:1629): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102692.995:1630): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102693.053:1631): pid=22110 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102693.053:1632): pid=22110 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78636E6C6579707A6C656670677377616D6679666E6B7A677261726F696A6F75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102693.054:1633): pid=22110 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102693.056:1634): pid=22110 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=SERVICE_START msg=audit(1770102693.764:1635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770102693.792:1636): pid=22110 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102693.792:1637): pid=22110 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102693.797:1638): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102693.797:1639): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102693.827:1640): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102693.827:1641): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102693.890:1642): pid=22283 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102693.890:1643): pid=22283 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6E72737263637961737762776C676574726C746762686D67716B6E62727478203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102693.892:1644): pid=22283 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102693.896:1645): pid=22283 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=SERVICE_START msg=audit(1770102694.498:1646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovsdb-server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770102694.527:1647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovs-delete-transient-ports comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770102694.774:1648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovs-vswitchd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770102694.780:1649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openvswitch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770102694.809:1650): pid=22283 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102694.810:1651): pid=22283 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102694.814:1652): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102694.814:1653): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102697.203:1654): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102697.203:1655): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102697.254:1656): pid=22448 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102697.254:1657): pid=22448 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626C6466706A6F63696C76666B7874636476647475797965696D6B636E766C74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102697.256:1658): pid=22448 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102697.260:1659): pid=22448 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=ANOM_PROMISCUOUS msg=audit(1770102698.519:1660): dev=ovs-system prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs" type=SYSCALL msg=audit(1770102698.519:1660): arch=c000003e syscall=46 success=yes exit=56 a0=15 a1=7ffd9e6e0aa0 a2=0 a3=0 items=0 ppid=1 pid=22424 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs" type=PROCTITLE msg=audit(1770102698.519:1660): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D type=ANOM_PROMISCUOUS msg=audit(1770102698.560:1661): dev=br-ex prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs" type=SYSCALL msg=audit(1770102698.560:1661): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7ffd9e6e0a80 a2=0 a3=0 items=0 ppid=1 pid=22424 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs" type=PROCTITLE msg=audit(1770102698.560:1661): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D type=SERVICE_START msg=audit(1770102701.827:1662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=ANOM_PROMISCUOUS msg=audit(1770102704.037:1663): dev=eth1 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs" type=SYSCALL msg=audit(1770102704.037:1663): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7ffd9e6e0a80 a2=0 a3=0 items=0 ppid=1 pid=22424 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs" type=PROCTITLE msg=audit(1770102704.037:1663): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D type=ANOM_PROMISCUOUS msg=audit(1770102704.205:1664): dev=vlan22 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs" type=SYSCALL msg=audit(1770102704.205:1664): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7ffd9e6e0a80 a2=0 a3=0 items=0 ppid=1 pid=22424 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs" type=PROCTITLE msg=audit(1770102704.205:1664): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D type=ANOM_PROMISCUOUS msg=audit(1770102707.488:1665): dev=vlan44 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs" type=SYSCALL msg=audit(1770102707.488:1665): arch=c000003e syscall=46 success=yes exit=52 a0=19 a1=7ffd9e6e0a80 a2=0 a3=0 items=0 ppid=1 pid=22424 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs" type=PROCTITLE msg=audit(1770102707.488:1665): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D type=ANOM_PROMISCUOUS msg=audit(1770102710.764:1666): dev=vlan23 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs" type=SYSCALL msg=audit(1770102710.764:1666): arch=c000003e syscall=46 success=yes exit=52 a0=19 a1=7ffd9e6e0a80 a2=0 a3=0 items=0 ppid=1 pid=22424 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs" type=PROCTITLE msg=audit(1770102710.764:1666): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D type=SERVICE_STOP msg=audit(1770102711.885:1667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=ANOM_PROMISCUOUS msg=audit(1770102714.082:1668): dev=vlan20 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs" type=SYSCALL msg=audit(1770102714.082:1668): arch=c000003e syscall=46 success=yes exit=52 a0=19 a1=7ffd9e6e0a80 a2=0 a3=0 items=0 ppid=1 pid=22424 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs" type=PROCTITLE msg=audit(1770102714.082:1668): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D type=ANOM_PROMISCUOUS msg=audit(1770102717.357:1669): dev=vlan21 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs" type=SYSCALL msg=audit(1770102717.357:1669): arch=c000003e syscall=46 success=yes exit=52 a0=19 a1=7ffd9e6e0a80 a2=0 a3=0 items=0 ppid=1 pid=22424 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs" type=PROCTITLE msg=audit(1770102717.357:1669): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D type=USER_END msg=audit(1770102727.026:1670): pid=22448 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102727.027:1671): pid=22448 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102727.031:1672): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102727.031:1673): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102749.925:1674): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102749.925:1675): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770102752.168:1676): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102752.168:1677): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102753.200:1678): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102753.200:1679): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770102753.474:1680): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102753.474:1681): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102753.512:1682): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102753.512:1683): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102753.570:1684): pid=23777 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102753.570:1685): pid=23777 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6166796877776B6C6E6F636C6575636B716C6E6178756D69767A736C69787264203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102753.571:1686): pid=23777 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102753.578:1687): pid=23777 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102753.808:1688): pid=23777 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102753.809:1689): pid=23777 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102753.814:1690): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102753.814:1691): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102754.315:1692): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102754.315:1693): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770102754.550:1694): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102754.551:1695): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102754.620:1696): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102754.620:1697): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102754.679:1698): pid=23807 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102754.679:1699): pid=23807 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637476756E6B6763746A73667A6163717A63676770667669656C73636A657965203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102754.680:1700): pid=23807 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102754.685:1701): pid=23807 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102754.892:1702): pid=23807 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102754.892:1703): pid=23807 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770102754.896:1704): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102754.896:1705): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102755.060:1706): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102755.060:1707): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770102755.246:1708): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102755.246:1709): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102755.539:1710): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102755.539:1711): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770102755.739:1712): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102755.739:1713): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770102756.173:1714): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102756.174:1715): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770102756.226:1716): pid=23856 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770102756.226:1717): pid=23856 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706A737669717A756771677A76777872756A6E6B6E696D6569666D666D676E6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770102756.226:1718): pid=23856 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770102756.228:1719): pid=23856 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=BPF msg=audit(1770102756.405:1720): prog-id=66 op=LOAD type=BPF msg=audit(1770102756.405:1721): prog-id=67 op=LOAD type=SERVICE_START msg=audit(1770102756.480:1722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770102756.501:1723): pid=23856 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770102756.501:1724): pid=23856 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=SERVICE_START msg=audit(1770102756.503:1725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770102756.505:1726): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102756.505:1727): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1770102757.401:1728): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19167 suid=1000 rport=35592 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1770102757.407:1729): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1770102757.407:1730): pid=19164 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_SESSION msg=audit(1770102759.643:1731): pid=23873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=23874 suid=74 rport=43626 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770102759.643:1732): pid=23873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp256 spid=23874 suid=74 rport=43626 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770102759.699:1733): pid=23873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1770102759.716:1734): pid=23873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770102759.716:1735): pid=23873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770102759.739:1736): pid=23873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770102759.739:1737): pid=23873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23874 suid=74 rport=43626 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770102759.741:1738): pid=23873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770102759.741:1739): pid=23873 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=11 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1770102759.741:1739): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff57031af0 a2=4 a3=3e8 items=0 ppid=1134 pid=23873 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770102759.741:1739): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1770102759.742:1740): pid=23873 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_START msg=audit(1770102759.760:1741): pid=23873 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_ACQ msg=audit(1770102759.762:1742): pid=23876 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1770102759.805:1743): pid=23873 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770102759.805:1744): pid=23873 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770102760.002:1745): pid=23873 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770102760.002:1746): pid=23873 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1770102761.525:1747): pid=23873 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23876 suid=1000 rport=43626 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1770102761.527:1748): pid=23873 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1770102761.527:1749): pid=23873 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=SERVICE_STOP msg=audit(1770102766.532:1750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770102786.518:1751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770102786.565:1752): prog-id=0 op=UNLOAD type=BPF msg=audit(1770102786.565:1753): prog-id=0 op=UNLOAD type=CRYPTO_SESSION msg=audit(1770102802.478:1754): pid=23894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23895 suid=74 rport=41996 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770102802.478:1755): pid=23894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23895 suid=74 rport=41996 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770102802.904:1756): pid=23894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23895 suid=74 rport=41996 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770102802.905:1757): pid=23894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770102802.906:1758): pid=23894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770103007.648:1759): pid=23896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23897 suid=74 rport=37018 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770103007.648:1760): pid=23896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23897 suid=74 rport=37018 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770103008.086:1761): pid=23896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23897 suid=74 rport=37018 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770103008.087:1762): pid=23896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770103008.088:1763): pid=23896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770103207.315:1764): pid=23899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23900 suid=74 rport=34102 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770103207.315:1765): pid=23899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23900 suid=74 rport=34102 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770103207.754:1766): pid=23899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23900 suid=74 rport=34102 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770103207.755:1767): pid=23899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770103207.756:1768): pid=23899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770103413.969:1769): pid=23903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23904 suid=74 rport=58996 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770103413.969:1770): pid=23903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23904 suid=74 rport=58996 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770103414.392:1771): pid=23903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23904 suid=74 rport=58996 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770103414.393:1772): pid=23903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770103414.394:1773): pid=23903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770103614.378:1774): pid=23905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23906 suid=74 rport=57628 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770103614.378:1775): pid=23905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23906 suid=74 rport=57628 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770103614.818:1776): pid=23905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23906 suid=74 rport=57628 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770103614.819:1777): pid=23905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770103614.819:1778): pid=23905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770103811.711:1779): pid=23908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23909 suid=74 rport=33270 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770103811.711:1780): pid=23908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23909 suid=74 rport=33270 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770103812.151:1781): pid=23908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23909 suid=74 rport=33270 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770103812.152:1782): pid=23908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770103812.152:1783): pid=23908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770104005.587:1784): pid=23914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23915 suid=74 rport=36342 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770104005.588:1785): pid=23914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23915 suid=74 rport=36342 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770104006.010:1786): pid=23914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23915 suid=74 rport=36342 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770104006.012:1787): pid=23914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770104006.012:1788): pid=23914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770104203.776:1789): pid=23917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23918 suid=74 rport=52770 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770104203.776:1790): pid=23917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23918 suid=74 rport=52770 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770104204.200:1791): pid=23917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23918 suid=74 rport=52770 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770104204.201:1792): pid=23917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770104204.201:1793): pid=23917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770104401.168:1794): pid=23920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23921 suid=74 rport=44128 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770104401.169:1795): pid=23920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23921 suid=74 rport=44128 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770104401.592:1796): pid=23920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23921 suid=74 rport=44128 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770104401.593:1797): pid=23920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770104401.594:1798): pid=23920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770104605.344:1799): pid=23922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23923 suid=74 rport=55756 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770104605.344:1800): pid=23922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23923 suid=74 rport=55756 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770104605.786:1801): pid=23922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23923 suid=74 rport=55756 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770104605.787:1802): pid=23922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770104605.787:1803): pid=23922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770104808.779:1804): pid=23926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23927 suid=74 rport=41684 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770104808.779:1805): pid=23926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23927 suid=74 rport=41684 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770104809.203:1806): pid=23926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23927 suid=74 rport=41684 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770104809.204:1807): pid=23926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770104809.205:1808): pid=23926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770105010.088:1809): pid=23929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23930 suid=74 rport=48064 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770105010.088:1810): pid=23929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23930 suid=74 rport=48064 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770105010.529:1811): pid=23929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23930 suid=74 rport=48064 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770105010.530:1812): pid=23929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770105010.531:1813): pid=23929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770105206.747:1814): pid=23934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23935 suid=74 rport=36104 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770105206.748:1815): pid=23934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23935 suid=74 rport=36104 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770105207.170:1816): pid=23934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23935 suid=74 rport=36104 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770105207.171:1817): pid=23934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770105207.171:1818): pid=23934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770105406.465:1819): pid=23937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23938 suid=74 rport=44710 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770105406.466:1820): pid=23937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=ecdh-sha2-nistp256 spid=23938 suid=74 rport=44710 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770105406.908:1821): pid=23937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23938 suid=74 rport=44710 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770105406.909:1822): pid=23937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=2.57.122.238 addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770105406.910:1823): pid=23937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.57.122.238 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770106845.135:1824): pid=23959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=ecdh-sha2-nistp256 spid=23960 suid=74 rport=41630 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770106845.136:1825): pid=23959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=ecdh-sha2-nistp256 spid=23960 suid=74 rport=41630 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770106845.203:1826): pid=23959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770106845.203:1827): pid=23959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770106845.228:1828): pid=23959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770106845.228:1829): pid=23959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23960 suid=74 rport=41630 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770106845.230:1830): pid=23959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770106845.231:1831): pid=23959 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=12 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1770106845.231:1831): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffea2de890 a2=4 a3=3e8 items=0 ppid=1134 pid=23959 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770106845.231:1831): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1770106845.232:1832): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_START msg=audit(1770106845.249:1833): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_ACQ msg=audit(1770106845.252:1834): pid=23962 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1770106845.295:1835): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770106845.295:1836): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770106845.323:1837): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770106845.323:1838): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770106845.340:1839): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770106845.340:1840): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770106845.407:1841): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770106845.407:1842): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770106845.428:1843): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770106845.428:1844): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770106845.474:1845): pid=24005 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770106845.475:1846): pid=24005 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6A626A68636D746B706A626B6D64727A717472747077636A716D70786C7561203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770106845.476:1847): pid=24005 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770106845.480:1848): pid=24005 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770106845.635:1849): pid=24005 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770106845.635:1850): pid=24005 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770106845.639:1851): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770106845.639:1852): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770106845.940:1853): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770106845.940:1854): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770106845.969:1855): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770106845.969:1856): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770106845.986:1857): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770106845.986:1858): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770106846.075:1859): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770106846.075:1860): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770106846.098:1861): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770106846.098:1862): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770106846.158:1863): pid=24050 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770106846.158:1864): pid=24050 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72707A6E717A6C6871746163737A6D6A6A6166727A7363746261646375687366203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770106846.159:1865): pid=24050 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770106846.162:1866): pid=24050 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770106846.447:1867): pid=24050 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770106846.447:1868): pid=24050 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770106846.452:1869): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770106846.452:1870): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770106846.541:1871): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770106846.541:1872): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770106846.603:1873): pid=24070 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770106846.604:1874): pid=24070 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687664646668756C6E7673686F6767766361667A7472737A6569766C7879676F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770106846.604:1875): pid=24070 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770106846.607:1876): pid=24070 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=ADD_GROUP msg=audit(1770106846.816:1877): pid=24074 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-group acct="tripleo-admin" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=ADD_USER msg=audit(1770106846.818:1878): pid=24074 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user acct="tripleo-admin" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=USER_MGMT msg=audit(1770106846.867:1879): pid=24074 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-home-dir id=1002 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="tripleo-admin" type=USER_END msg=audit(1770106846.893:1880): pid=24070 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770106846.893:1881): pid=24070 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770106846.896:1882): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770106846.896:1883): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770106846.984:1884): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770106846.984:1885): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770106847.012:1886): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770106847.012:1887): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770106847.034:1888): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770106847.034:1889): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770106847.067:1890): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770106847.067:1891): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770106847.088:1892): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770106847.088:1893): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770106847.126:1894): pid=24126 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770106847.126:1895): pid=24126 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7568697876696A78696B6B73656D7A786376616F6E7A74676D706C68687469203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770106847.127:1896): pid=24126 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770106847.128:1897): pid=24126 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770106847.320:1898): pid=24126 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770106847.320:1899): pid=24126 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770106847.323:1900): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770106847.323:1901): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770106847.345:1902): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770106847.345:1903): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770106847.373:1904): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770106847.373:1905): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770106847.384:1906): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770106847.385:1907): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770106847.417:1908): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770106847.417:1909): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770106847.569:1910): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770106847.570:1911): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770106847.613:1912): pid=24169 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770106847.613:1913): pid=24169 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7671636F766E68756F6C78676B6878646E797A626B6A6B6669666A7671776376203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770106847.614:1914): pid=24169 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770106847.616:1915): pid=24169 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770106847.792:1916): pid=24169 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770106847.793:1917): pid=24169 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770106847.798:1918): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770106847.799:1919): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770106847.817:1920): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770106847.817:1921): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770106847.849:1922): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770106847.849:1923): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770106847.926:1924): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770106847.926:1925): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770106847.979:1926): pid=24199 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770106847.979:1927): pid=24199 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676D6C666A7061726B787268636463636A6E61617268666A6E786570796B6676203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770106847.979:1928): pid=24199 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770106847.981:1929): pid=24199 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770106848.156:1930): pid=24199 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770106848.156:1931): pid=24199 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770106848.159:1932): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770106848.159:1933): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770106848.245:1934): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770106848.246:1935): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770106848.305:1936): pid=24215 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770106848.305:1937): pid=24215 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7274756C766C6A6A75646C687966776C7874756F617366746E6764636D716B7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770106848.306:1938): pid=24215 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770106848.309:1939): pid=24215 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770106848.480:1940): pid=24215 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770106848.480:1941): pid=24215 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770106848.483:1942): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770106848.483:1943): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770106848.543:1944): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770106848.543:1945): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770106848.579:1946): pid=24231 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770106848.579:1947): pid=24231 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7067636D6B6E786E637773766477756E686F736C7177696E6F6F706B74746F68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770106848.580:1948): pid=24231 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770106848.581:1949): pid=24231 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770106848.746:1950): pid=24231 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770106848.746:1951): pid=24231 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770106848.748:1952): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770106848.748:1953): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770106848.996:1954): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770106848.996:1955): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_ACCT msg=audit(1770106849.048:1956): pid=24247 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770106849.048:1957): pid=24247 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6579646271706F62716877726A6966786C77716A7161636B6F74756571697566203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770106849.049:1958): pid=24247 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770106849.050:1959): pid=24247 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770106849.246:1960): pid=24247 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770106849.247:1961): pid=24247 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770106849.251:1962): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770106849.251:1963): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770106849.421:1964): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770106849.421:1965): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1770106849.622:1966): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770106849.622:1967): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_SESSION msg=audit(1770106856.340:1968): pid=24264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=ecdh-sha2-nistp256 spid=24265 suid=74 rport=52300 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770106856.341:1969): pid=24264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=ecdh-sha2-nistp256 spid=24265 suid=74 rport=52300 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770106856.404:1970): pid=24264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770106856.404:1971): pid=24264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770106856.434:1972): pid=24264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770106856.434:1973): pid=24264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24265 suid=74 rport=52300 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770106856.437:1974): pid=24264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770106856.437:1975): pid=24264 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=13 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin" type=SYSCALL msg=audit(1770106856.437:1975): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe558e5bd0 a2=4 a3=3ea items=0 ppid=1134 pid=24264 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770106856.437:1975): proctitle=737368643A20747269706C656F2D61646D696E205B707269765D type=USER_ROLE_CHANGE msg=audit(1770106856.439:1976): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770106856.470:1977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770106856.503:1978): pid=24268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1770106856.503:1979): pid=24268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1770106856.504:1980): pid=24268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770106856.505:1981): pid=24268 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=14 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin" type=SYSCALL msg=audit(1770106856.505:1981): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffd05f2fe00 a2=4 a3=3ea items=0 ppid=1 pid=24268 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770106856.505:1981): proctitle="(systemd)" type=USER_START msg=audit(1770106856.507:1982): pid=24268 uid=0 auid=1002 ses=14 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770106856.631:1983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770106856.644:1984): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" type=CRED_ACQ msg=audit(1770106856.647:1985): pid=24284 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" type=USER_LOGIN msg=audit(1770106856.690:1986): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106856.690:1987): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106856.724:1988): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106856.724:1989): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106856.736:1990): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106856.736:1991): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106856.823:1992): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106856.823:1993): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106856.843:1994): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106856.843:1995): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106856.902:1996): pid=24327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106856.902:1997): pid=24327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76797666706A6E7063706569706B70676C7561747069616B666A737068786576203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106856.903:1998): pid=24327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106856.906:1999): pid=24327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106857.304:2000): pid=24327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106857.305:2001): pid=24327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106857.308:2002): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106857.308:2003): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106858.724:2004): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106858.724:2005): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106858.786:2006): pid=24347 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106858.786:2007): pid=24347 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617272676A616B7478776D71757A63776165637365776F76616F76756C747766203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106858.787:2008): pid=24347 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106858.789:2009): pid=24347 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106859.040:2010): pid=24347 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106859.040:2011): pid=24347 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106859.044:2012): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106859.044:2013): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106859.434:2014): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106859.434:2015): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106859.499:2016): pid=24363 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106859.499:2017): pid=24363 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6978706F796E72696777636A7A6F766967637A726577676E746363676E7875203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106859.500:2018): pid=24363 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106859.503:2019): pid=24363 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106859.676:2020): pid=24363 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106859.677:2021): pid=24363 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106859.680:2022): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106859.680:2023): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106859.730:2024): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106859.730:2025): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106859.763:2026): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106859.763:2027): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106859.779:2028): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106859.780:2029): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106859.820:2030): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106859.820:2031): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106859.899:2032): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106859.899:2033): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106859.949:2034): pid=24411 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106859.949:2035): pid=24411 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A677974756B6B7662797479757A6869766F6167767862687666727474716E7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106859.950:2036): pid=24411 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106859.953:2037): pid=24411 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106860.109:2038): pid=24411 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106860.109:2039): pid=24411 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106860.112:2040): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106860.112:2041): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106860.130:2042): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106860.130:2043): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106860.155:2044): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106860.156:2045): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106860.339:2046): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106860.339:2047): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106860.408:2048): pid=24441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106860.408:2049): pid=24441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69696D766672716A6A776D77736762706F686D6C766D766C68706B7174686E73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106860.409:2050): pid=24441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106860.411:2051): pid=24441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106860.610:2052): pid=24441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106860.611:2053): pid=24441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106860.615:2054): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106860.615:2055): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106860.917:2056): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106860.917:2057): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106860.979:2058): pid=24457 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106860.979:2059): pid=24457 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E62706C717367656E73656B73727A6A686C6A6A716D6E64786778756462796A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106860.980:2060): pid=24457 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106860.983:2061): pid=24457 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106861.139:2062): pid=24457 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106861.140:2063): pid=24457 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106861.143:2064): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106861.143:2065): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106861.340:2066): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106861.340:2067): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106861.400:2068): pid=24473 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106861.400:2069): pid=24473 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7570787274706A7268636B6C69656170636E67686F736A75776D6A65756664203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106861.402:2070): pid=24473 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106861.405:2071): pid=24473 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106861.547:2072): pid=24473 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106861.547:2073): pid=24473 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106861.552:2074): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106861.553:2075): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106861.761:2076): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106861.761:2077): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106861.819:2078): pid=24490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106861.819:2079): pid=24490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626D71626B6D74646F6A65776867676B74786173646E7471696C69667667746C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106861.820:2080): pid=24490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106861.823:2081): pid=24490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106861.996:2082): pid=24490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106861.996:2083): pid=24490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106862.001:2084): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106862.001:2085): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106862.406:2086): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106862.406:2087): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106862.454:2088): pid=24507 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106862.454:2089): pid=24507 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6961796D79626F7475617573746A766A7A6E796A6D6C6C6F6263777767737974203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106862.455:2090): pid=24507 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106862.456:2091): pid=24507 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106862.647:2092): pid=24507 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106862.647:2093): pid=24507 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106862.650:2094): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106862.650:2095): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106862.917:2096): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106862.918:2097): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106862.979:2098): pid=24524 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106862.979:2099): pid=24524 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7562717974636A7976696D62786C636D636969666A7973677961686D646277203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106862.980:2100): pid=24524 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106862.982:2101): pid=24524 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106866.164:2102): pid=24526 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rhosp-release-17.1.13-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770106866.899:2103): pid=24524 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106866.899:2104): pid=24524 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106866.903:2105): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106866.904:2106): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106867.264:2107): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106867.264:2108): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106867.333:2109): pid=24545 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106867.334:2110): pid=24545 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7367696671737576666A7870686C6571767A7570786962616A696F646A6B6577203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106867.334:2111): pid=24545 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106867.338:2112): pid=24545 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106867.527:2113): pid=24545 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106867.527:2114): pid=24545 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106867.531:2115): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106867.531:2116): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106867.633:2117): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106867.633:2118): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106867.694:2119): pid=24562 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106867.694:2120): pid=24562 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696B6B696F706261717762636579696871717979786E68696A6971657A6F6668203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106867.695:2121): pid=24562 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106867.698:2122): pid=24562 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770106883.047:2123): prog-id=68 op=LOAD type=BPF msg=audit(1770106883.047:2124): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106883.048:2125): prog-id=69 op=LOAD type=BPF msg=audit(1770106883.048:2126): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106883.050:2127): prog-id=70 op=LOAD type=BPF msg=audit(1770106883.050:2128): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106883.050:2129): prog-id=71 op=LOAD type=BPF msg=audit(1770106883.050:2130): prog-id=72 op=LOAD type=BPF msg=audit(1770106883.050:2131): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106883.050:2132): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106883.052:2133): prog-id=73 op=LOAD type=BPF msg=audit(1770106883.052:2134): prog-id=74 op=LOAD type=BPF msg=audit(1770106883.052:2135): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106883.052:2136): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106883.053:2137): prog-id=75 op=LOAD type=BPF msg=audit(1770106883.053:2138): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106883.054:2139): prog-id=76 op=LOAD type=BPF msg=audit(1770106883.054:2140): prog-id=77 op=LOAD type=BPF msg=audit(1770106883.054:2141): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106883.054:2142): prog-id=0 op=UNLOAD type=ADD_GROUP msg=audit(1770106884.740:2143): pid=24782 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="puppet" type=GRP_MGMT msg=audit(1770106884.746:2144): pid=24782 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="puppet" type=ADD_USER msg=audit(1770106884.811:2145): pid=24789 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="puppet" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=BPF msg=audit(1770106891.436:2146): prog-id=78 op=LOAD type=BPF msg=audit(1770106891.436:2147): prog-id=79 op=LOAD type=BPF msg=audit(1770106891.436:2148): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106891.436:2149): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106891.437:2150): prog-id=80 op=LOAD type=BPF msg=audit(1770106891.437:2151): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106891.440:2152): prog-id=81 op=LOAD type=BPF msg=audit(1770106891.440:2153): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106891.442:2154): prog-id=82 op=LOAD type=BPF msg=audit(1770106891.442:2155): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106891.442:2156): prog-id=83 op=LOAD type=BPF msg=audit(1770106891.442:2157): prog-id=84 op=LOAD type=BPF msg=audit(1770106891.442:2158): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106891.442:2159): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106891.443:2160): prog-id=85 op=LOAD type=BPF msg=audit(1770106891.443:2161): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106891.443:2162): prog-id=86 op=LOAD type=BPF msg=audit(1770106891.443:2163): prog-id=87 op=LOAD type=BPF msg=audit(1770106891.443:2164): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106891.443:2165): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770106891.518:2166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=lvm2-monitor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770106891.752:2167): prog-id=88 op=LOAD type=BPF msg=audit(1770106891.752:2168): prog-id=89 op=LOAD type=BPF msg=audit(1770106891.752:2169): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106891.752:2170): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106891.752:2171): prog-id=90 op=LOAD type=BPF msg=audit(1770106891.752:2172): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106891.755:2173): prog-id=91 op=LOAD type=BPF msg=audit(1770106891.755:2174): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106891.757:2175): prog-id=92 op=LOAD type=BPF msg=audit(1770106891.758:2176): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106891.758:2177): prog-id=93 op=LOAD type=BPF msg=audit(1770106891.758:2178): prog-id=94 op=LOAD type=BPF msg=audit(1770106891.758:2179): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106891.758:2180): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106891.759:2181): prog-id=95 op=LOAD type=BPF msg=audit(1770106891.759:2182): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106891.759:2183): prog-id=96 op=LOAD type=BPF msg=audit(1770106891.759:2184): prog-id=97 op=LOAD type=BPF msg=audit(1770106891.759:2185): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106891.759:2186): prog-id=0 op=UNLOAD type=USER_MAC_CONFIG_CHANGE msg=audit(1770106894.089:2187): pid=24893 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=modify lport=4444 proto=6 tcontext=system_u:object_r:mysqld_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106895.025:2188): pid=25439 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=modify lport=6653 proto=6 tcontext=system_u:object_r:openvswitch_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106896.504:2189): pid=25448 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=8088 proto=6 tcontext=system_u:object_r:http_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106897.414:2190): pid=25452 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=modify lport=8000 proto=6 tcontext=system_u:object_r:http_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106898.786:2191): pid=25460 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=6639 proto=6 tcontext=system_u:object_r:ovsdb_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106900.200:2192): pid=25468 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=6641 proto=6 tcontext=system_u:object_r:ovsdb_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106901.585:2193): pid=25525 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=6642 proto=6 tcontext=system_u:object_r:ovsdb_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106902.478:2194): pid=25529 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/swift-object-relinker" ftype=any tcontext=system_u:object_r:swift_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106903.439:2195): pid=25534 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/gnocchi/app.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106904.335:2196): pid=25539 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/tftpboot(/.*)?" ftype=any tcontext=system_u:object_r:tftpdir_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106905.183:2197): pid=25544 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/kolla(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106906.032:2198): pid=25553 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/tripleo-config(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106906.888:2199): pid=25558 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/vhost_sockets(/.*)?" ftype=any tcontext=system_u:object_r:virt_cache_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106907.827:2200): pid=25563 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/neutron-rootwrap-daemon" ftype=any tcontext=system_u:object_r:neutron_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106908.766:2201): pid=25568 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/cache/swift(/.*)?" ftype=any tcontext=system_u:object_r:swift_var_cache_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106909.688:2202): pid=25573 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/designate/bind9(/.*)?" ftype=any tcontext=system_u:object_r:named_zone_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106910.614:2203): pid=25578 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/httpboot(/.*)?" ftype=any tcontext=system_u:object_r:httpd_sys_content_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106911.558:2204): pid=25583 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/panko/app.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106912.544:2205): pid=25588 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/nova/.ssh(/.*)?" ftype=any tcontext=system_u:object_r:ssh_home_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106913.408:2206): pid=25593 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/zaqar/zaqar.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106914.356:2207): pid=25601 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/neutron-vpn-agent" ftype=any tcontext=system_u:object_r:neutron_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106915.284:2208): pid=25606 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/pacemaker.log.*" ftype=any tcontext=system_u:object_r:cluster_var_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106916.208:2209): pid=25611 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/swift-object-reconstructor" ftype=any tcontext=system_u:object_r:swift_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106917.126:2210): pid=25616 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/openstack-dashboard" ftype=any tcontext=system_u:object_r:httpd_var_lib_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106918.530:2211): pid=25622 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/aodh/app.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MAC_CONFIG_CHANGE msg=audit(1770106919.479:2212): pid=25627 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/config-data(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770106936.353:2213): bool=httpd_execmem val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770106936.353:2213): bool=httpd_can_network_connect val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770106936.353:2213): bool=httpd_use_openstack val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770106936.353:2213): bool=domain_can_mmap_files val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770106936.353:2213): bool=domain_kernel_load_modules val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770106936.353:2213): bool=nis_enabled val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770106936.353:2213): bool=collectd_tcp_network_connect val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770106936.353:2213): bool=glance_api_can_network val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770106936.353:2213): bool=glance_use_fusefs val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770106936.353:2213): bool=glance_use_execmem val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770106936.353:2213): bool=daemons_enable_cluster_mode val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770106936.353:2213): bool=neutron_can_network val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770106936.353:2213): bool=haproxy_connect_any val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770106936.353:2213): bool=rsync_client val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770106936.353:2213): bool=rsync_full_access val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770106936.353:2213): bool=swift_can_network val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770106936.353:2213): bool=virt_use_execmem val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770106936.353:2213): bool=virt_use_fusefs val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=SYSCALL msg=audit(1770106936.353:2213): arch=c000003e syscall=1 success=yes exit=2 a0=34 a1=7fff4c5f5a9e a2=2 a3=0 items=0 ppid=24889 pid=25633 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="semanage" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770106936.353:2213): proctitle=2F7573722F62696E2F707974686F6E33002D457349002F7573722F7362696E2F73656D616E61676500696D706F7274002D4E type=MAC_POLICY_LOAD msg=audit(1770106938.147:2214): auid=1002 ses=13 lsm=selinux res=1AUID="tripleo-admin" type=SYSCALL msg=audit(1770106938.147:2214): arch=c000003e syscall=1 success=yes exit=3546155 a0=4 a1=7f8e0e400000 a2=361c2b a3=0 items=0 ppid=24889 pid=25735 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770106938.147:2214): proctitle="/usr/sbin/load_policy" type=SERVICE_START msg=audit(1770106938.462:2215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r61be773e4d2641beb25b4d02b4ec881e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770106938.663:2216): prog-id=98 op=LOAD type=BPF msg=audit(1770106938.663:2217): prog-id=99 op=LOAD type=BPF msg=audit(1770106938.663:2218): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106938.663:2219): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106938.664:2220): prog-id=100 op=LOAD type=BPF msg=audit(1770106938.664:2221): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106938.667:2222): prog-id=101 op=LOAD type=BPF msg=audit(1770106938.667:2223): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106938.670:2224): prog-id=102 op=LOAD type=BPF msg=audit(1770106938.670:2225): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106938.670:2226): prog-id=103 op=LOAD type=BPF msg=audit(1770106938.670:2227): prog-id=104 op=LOAD type=BPF msg=audit(1770106938.670:2228): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106938.670:2229): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106938.671:2230): prog-id=105 op=LOAD type=BPF msg=audit(1770106938.671:2231): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106938.671:2232): prog-id=106 op=LOAD type=BPF msg=audit(1770106938.671:2233): prog-id=107 op=LOAD type=BPF msg=audit(1770106938.671:2234): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106938.671:2235): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770106938.712:2236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r65dcc77b57964f1da1f5209997e72a6e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2237): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-libs-3.0.4-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2238): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-bigdecimal-3.0.0-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2239): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-default-gems-3.0.4-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2240): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-bundler-2.2.33-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2241): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-io-console-0.5.7-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2242): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-json-2.5.1-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2243): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-psych-3.3.2-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2244): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-rdoc-6.3.3-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2245): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygems-3.2.33-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2246): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-3.0.4-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2247): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-regex-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2248): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-system-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2249): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-filesystem-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2250): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-thread-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2251): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libaio-0.3.111-13.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2252): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-chrono-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2253): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-locale-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2254): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="device-mapper-libs-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2255): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="device-mapper-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2256): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="device-mapper-event-libs-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2257): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-psutil-5.8.0-12.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2258): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-simplejson-3.17.5-3.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2259): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-os-service-types-1.7.0-17.1.20230620201222.0b2f473.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2260): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-keystoneauth1-4.4.0-17.1.20240812145234.112bcae.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2261): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="dib-utils-0.0.11-17.1.20230620173328.51661c3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2262): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-refresh-config-13.1.1-17.1.20231020000854.812905b.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2263): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-jeepney-0.6.0-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2264): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-secretstorage-3.3.1-3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2265): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-keyring-21.8.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2266): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pystache-0.5.4-15.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2267): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-apply-config-13.1.1-17.1.20231020001757.3c7f9b9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2268): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="device-mapper-event-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2269): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="lvm2-libs-9:2.03.17-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2270): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="device-mapper-persistent-data-0.9.0-13.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2271): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-fast_gettext-1.2.0-9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2272): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-hocon-1.3.1-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2273): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="hiera-3.6.0-6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2274): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-concurrent-ruby-1.1.5-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.750:2275): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-deep_merge-1.2.1-7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2276): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-multi_json-1.15.0-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2277): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-ruby-shadow-2.5.0-15.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2278): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-semantic_puppet-1.0.4-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2279): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-rexml-3.2.5-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2280): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libselinux-ruby-3.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2281): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libxslt-1.1.34-11.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2282): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-lxml-4.6.5-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2283): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pcp-conf-6.0.1-8.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2284): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="augeas-libs-1.13.0-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2285): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-augeas-0.5.0-29.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2286): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-mako-1.1.4-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2287): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-dogpile-cache-1.1.5-5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2288): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="oniguruma-6.9.6-1.el9.5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2289): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-wcwidth-0.2.5-8.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2290): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyasn1-0.4.8-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2291): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-rsa-4.6-3.1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2292): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-boto-2.45.0-8.1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2293): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="heat-cfntools-1.4.2-6.1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2294): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-appdirs-1.4.4-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2295): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="lm_sensors-libs-3.6.0-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2296): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-atomic-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2297): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-log-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2298): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-program-options-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2299): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libuv-1:1.42.0-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2300): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-nft-services-1.8.8-6.el9_1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2301): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-nowide-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2302): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="leatherman-1.12.6-5.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2303): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="cpp-hocon-0.3.0-7.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2304): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="glibc-langpack-en-2.34-60.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2305): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="avahi-libs-0.8-12.el9_2.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2306): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pcp-libs-6.0.1-8.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2307): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="yaml-cpp-0.6.3-6.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2308): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="facter-1:3.14.19-3.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2309): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-facter-1:3.14.19-3.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2310): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-puppet-resource_api-1.8.13-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2311): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-headless-7.10.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2312): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-7.10.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2313): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-stdlib-6.3.1-17.1.20230621000857.7c1ae25.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2314): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-inifile-4.2.1-17.1.20250804150825.df46d2a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2315): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-concat-6.2.1-17.1.20250725131333.dfeabb9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2316): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-apache-6.5.2-17.1.20250811150836.e4a1532.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2317): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-xinetd-3.3.1-17.1.20230620185435.8d460c4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2318): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-firewall-3.4.1-17.1.20250804151611.94f707c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2319): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-memcached-6.0.0-17.1.20230620184630.4c70dbd.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2320): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-sysctl-0.0.13-17.1.20250725113328.847ec1c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2321): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-rsync-1.1.4-17.1.20250804151510.ea6397e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2322): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-corosync-8.0.1-17.1.20230621104908.6a9da9a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2323): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-mysql-10.6.1-17.1.20230621022141.937d044.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2324): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-systemd-2.12.1-17.1.20230620191611.8f68b0d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2325): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-redis-6.1.1-17.1.20230620191704.547105e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2326): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-openstack_extras-18.5.1-17.1.20230621042409.504e1a0.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2327): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-horizon-18.6.1-17.1.20251008130751.8074e69.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2328): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-pacemaker-1.5.1-17.1.20250214161010.f10ce89.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2329): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-auditd-2.2.1-17.1.20230620192453.189b22b.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2330): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-collectd-13.0.1-17.1.20230620193147.ad138a7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2331): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-dns-8.2.1-17.1.20230621002045.70f5b28.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2332): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-rsyslog-4.0.1-17.1.20230620200132.2548a0d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2333): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ssh-6.2.1-17.1.20230620190251.6e0f430.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2334): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-haproxy-4.2.2-17.1.20250725114653.a797b8c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2335): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-keepalived-0.0.2-17.1.20250725114922.bbca37a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2336): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-fdio-18.2-1.20220727113954.6fd1c8e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2337): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-archive-4.6.1-17.1.20230620181607.bc7e4ff.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2338): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-rabbitmq-11.0.1-17.1.20230620182519.63fee2c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2339): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-openstacklib-18.5.2-17.1.20230621052822.64d8ac6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.751:2340): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-oslo-18.5.1-17.1.20230621052358.fe2a147.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2341): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-keystone-18.6.1-17.1.20251008090800.cb0adcb.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2342): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-glance-18.6.1-17.1.20250220151014.81b081d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2343): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-cinder-18.5.2-17.1.20230621054224.6aa60e7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2344): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-nova-18.6.1-17.1.20230621090443.a21eae4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2345): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-octavia-18.5.1-17.1.20230621062420.842492c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2346): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-manila-18.5.2-17.1.20231102190827.a72a7d5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2347): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ceilometer-18.4.3-17.1.20230927010818.3838907.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2348): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-designate-18.6.1-17.1.20230621061456.f4c0b89.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2349): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-gnocchi-18.4.3-17.1.20230621061020.7584b94.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2350): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-heat-18.4.1-17.1.20230621111632.3b41bb0.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2351): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-placement-5.4.3-17.1.20230621061610.e7557a5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2352): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-swift-18.6.1-17.1.20230621052139.f105ffc.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2353): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-barbican-18.4.2-17.1.20250625204151.af6c77b.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2354): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-aodh-18.4.2-17.1.20230620151218.3e47b5a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2355): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-certmonger-2.7.1-17.1.20230620184730.3e2e660.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2356): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-etcd-1.12.3-17.1.20230620193226.e143c2d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2357): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-nssdb-1.0.2-17.1.20230620185645.2ed2a2d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2358): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-qdr-7.4.1-17.1.20230620195605.8a575de.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2359): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ovn-18.6.1-17.1.20240925094907.7805f7e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2360): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-git-0.5.0-17.1.20250725114148.4e4498e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2361): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ipaclient-2.5.2-17.1.20250725102608.b086731.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2362): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-snmp-3.9.1-17.1.20250725115759.5d73485.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2363): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-kmod-2.5.0-17.1.20230620190646.52e31e3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2364): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-vswitch-14.4.3-17.1.20230621043558.51e82ca.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2365): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-neutron-18.6.1-17.1.20251217160845.c9d467f.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2366): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-module-data-0.5.1-17.1.20250725115430.28dafce.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2367): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-remote-10.0.0-17.1.20250725114017.7420908.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2368): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-vcsrepo-3.1.1-17.1.20250725113408.a36ee18.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2369): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ironic-18.7.1-17.1.20240305210817.edf93f9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2370): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-munch-2.5.0-6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2371): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-msgpack-1.0.2-4.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2372): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-serialization-4.1.1-17.1.20230621011445.bbe5d5a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2373): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-keystoneclient-1:4.3.0-17.1.20230621025111.d5cb761.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2374): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-swiftclient-3.11.1-17.1.20230620204150.06b36ae.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2375): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-colorama-0.4.4-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2376): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-requestsexceptions-1.4.0-17.1.20230620164652.d7ac0ff.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2377): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-context-3.2.1-17.1.20230620204857.b124eb7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2378): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-log-lang-4.4.0-17.1.20230620205407.9b29c90.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2379): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-log-4.4.0-17.1.20230620205407.9b29c90.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2380): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyperclip-1.8.0-3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2381): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cmd2-1.4.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2382): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cliff-3.7.0-17.1.20230620172206.117a100.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2383): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-jmespath-0.10.0-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2384): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-openstacksdk-0.55.1-17.1.20250516211008.f09ed4a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2385): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-osc-lib-2.3.1-17.1.20230620203400.2b7a679.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2386): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heatclient-2.3.1-17.1.20230621012952.d16c245.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2387): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-zaqarclient-2.4.0-17.1.20230620214253.e388947.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2388): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-collect-config-13.1.1-17.1.20231020001748.76173d8.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2389): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2390): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-ansible-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2391): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-apply-config-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2392): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-docker-cmd-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2393): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-hiera-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2394): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-json-file-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2395): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-puppet-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2396): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-heat-agents-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2397): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-tripleo-14.2.3-17.1.20250320101351.40278e1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2398): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sysstat-12.5.4-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2399): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="jq-1.6-14.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2400): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="lvm2-9:2.03.17-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2401): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="tmpwatch-2.11-20.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2402): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="driverctl-0.111-2.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106938.752:2403): pid=24564 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-selinux-0.8.37-17.1.20231107080825.05dd1b2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770106939.270:2404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770106939.270:2405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770106939.273:2406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r61be773e4d2641beb25b4d02b4ec881e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770106939.275:2407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r65dcc77b57964f1da1f5209997e72a6e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770106939.737:2408): pid=24562 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106939.737:2409): pid=24562 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106939.740:2410): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106939.740:2411): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106939.899:2412): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106939.899:2413): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106939.947:2414): pid=26655 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106939.947:2415): pid=26655 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F616B746765696668686A776776666E736C626A7A666771687777756F6D7972203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106939.948:2416): pid=26655 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106939.953:2417): pid=26655 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106940.717:2418): pid=26655 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106940.717:2419): pid=26655 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106940.720:2420): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106940.720:2421): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1770106940.848:2422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770106940.848:2423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770106941.092:2424): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106941.092:2425): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106941.145:2426): pid=26794 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106941.146:2427): pid=26794 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6B657A6963716D6B677679626763766E696471636B79747A76746B6E796469203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106941.147:2428): pid=26794 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106941.149:2429): pid=26794 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770106941.685:2430): prog-id=108 op=LOAD type=BPF msg=audit(1770106941.685:2431): prog-id=109 op=LOAD type=BPF msg=audit(1770106941.685:2432): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106941.685:2433): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106941.686:2434): prog-id=110 op=LOAD type=BPF msg=audit(1770106941.686:2435): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106941.689:2436): prog-id=111 op=LOAD type=BPF msg=audit(1770106941.689:2437): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106941.691:2438): prog-id=112 op=LOAD type=BPF msg=audit(1770106941.691:2439): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106941.691:2440): prog-id=113 op=LOAD type=BPF msg=audit(1770106941.691:2441): prog-id=114 op=LOAD type=BPF msg=audit(1770106941.691:2442): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106941.691:2443): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106941.692:2444): prog-id=115 op=LOAD type=BPF msg=audit(1770106941.692:2445): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106941.692:2446): prog-id=116 op=LOAD type=BPF msg=audit(1770106941.692:2447): prog-id=117 op=LOAD type=BPF msg=audit(1770106941.692:2448): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106941.692:2449): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770106941.728:2450): pid=26794 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106941.728:2451): pid=26794 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106941.732:2452): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106941.732:2453): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106941.831:2454): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106941.831:2455): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106941.898:2456): pid=26848 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106941.898:2457): pid=26848 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776E6D6E706C696E696E6A76796F6376696B6B6571717061737874686B63766E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106941.899:2458): pid=26848 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106941.902:2459): pid=26848 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106942.079:2460): pid=26848 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106942.080:2461): pid=26848 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106942.083:2462): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106942.083:2463): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106942.203:2464): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106942.203:2465): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106942.258:2466): pid=26864 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106942.259:2467): pid=26864 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746874776B6C656F6963736B7371686A7A70636C69776B626A616E7068616471203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106942.259:2468): pid=26864 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106942.262:2469): pid=26864 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106942.447:2470): pid=26864 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106942.447:2471): pid=26864 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106942.450:2472): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106942.450:2473): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106942.578:2474): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106942.578:2475): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106942.637:2476): pid=26881 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106942.637:2477): pid=26881 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6473776C6F76736B667467636975676E76766C6F7063716B6973717A656E6976203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106942.638:2478): pid=26881 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106942.640:2479): pid=26881 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106942.908:2480): pid=26881 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106942.908:2481): pid=26881 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106942.911:2482): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106942.911:2483): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106943.099:2484): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106943.099:2485): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106943.151:2486): pid=26899 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106943.152:2487): pid=26899 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727278696E68766D7A616B67706E77696E7876617163696E7077796B72726F6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106943.153:2488): pid=26899 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106943.155:2489): pid=26899 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106943.301:2490): pid=26899 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106943.302:2491): pid=26899 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106943.306:2492): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106943.306:2493): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106943.389:2494): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106943.389:2495): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106943.456:2496): pid=26917 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106943.457:2497): pid=26917 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656B687A746775666C7275626A6A6F6977726D676E666E776C76736671786673203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106943.458:2498): pid=26917 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106943.461:2499): pid=26917 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106943.650:2500): pid=26917 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106943.651:2501): pid=26917 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106943.655:2502): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106943.655:2503): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106943.735:2504): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106943.735:2505): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106943.798:2506): pid=26935 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106943.799:2507): pid=26935 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69726A6B776664696176737A7A786E716E6A716D746662676C6D6E63766A7363203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106943.799:2508): pid=26935 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106943.802:2509): pid=26935 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106944.147:2510): pid=26935 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106944.147:2511): pid=26935 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106944.151:2512): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106944.151:2513): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106944.233:2514): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106944.234:2515): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106944.298:2516): pid=26954 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106944.299:2517): pid=26954 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7771616C61636B6B6675666C7A78656F61616D6D78746C6B75796F6C777A6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106944.299:2518): pid=26954 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106944.303:2519): pid=26954 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106944.483:2520): pid=26954 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106944.483:2521): pid=26954 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106944.487:2522): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106944.487:2523): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106944.719:2524): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106944.719:2525): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106944.777:2526): pid=26971 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106944.777:2527): pid=26971 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73677163776273796D767579636375777A776268646164646B697A7170707464203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106944.778:2528): pid=26971 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106944.780:2529): pid=26971 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106944.967:2530): pid=26971 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106944.968:2531): pid=26971 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106944.972:2532): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106944.972:2533): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106945.052:2534): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106945.052:2535): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106945.113:2536): pid=26989 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106945.113:2537): pid=26989 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6B707A66766D7A70776A776B6B696E6562716A72726178777163736278626C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106945.113:2538): pid=26989 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106945.116:2539): pid=26989 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106945.251:2540): pid=26989 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106945.251:2541): pid=26989 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106945.255:2542): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106945.255:2543): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106945.332:2544): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106945.332:2545): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106945.392:2546): pid=27005 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106945.392:2547): pid=27005 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6F6B6B6D79656E64786A6479757871646B63787563656A6E726D6B69756B67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106945.393:2548): pid=27005 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106945.395:2549): pid=27005 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106945.581:2550): pid=27005 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106945.582:2551): pid=27005 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106945.585:2552): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106945.585:2553): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106945.756:2554): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106945.756:2555): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106945.816:2556): pid=27021 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106945.816:2557): pid=27021 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E79796C697A797A64726C66766A6A7265637069706C6C726A6A767661756764203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106945.817:2558): pid=27021 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106945.820:2559): pid=27021 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106945.977:2560): pid=27021 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106945.977:2561): pid=27021 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106945.982:2562): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106945.982:2563): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106946.069:2564): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106946.069:2565): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106946.122:2566): pid=27037 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106946.122:2567): pid=27037 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646166636565747379656478616C6364626E78756A7667666D796269716C706E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106946.123:2568): pid=27037 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106946.125:2569): pid=27037 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106946.287:2570): pid=27037 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106946.287:2571): pid=27037 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106946.291:2572): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106946.291:2573): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106946.553:2574): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106946.553:2575): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106946.619:2576): pid=27053 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106946.620:2577): pid=27053 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616E6E6D6D6273796E6564667A616D6A6D696B68737668766B737664726F7A76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106946.620:2578): pid=27053 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106946.623:2579): pid=27053 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106946.812:2580): pid=27053 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106946.812:2581): pid=27053 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106946.816:2582): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106946.817:2583): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106946.903:2584): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106946.903:2585): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106946.957:2586): pid=27069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106946.957:2587): pid=27069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74617074627A717372756E707075727769696F746178776E767974687A6F726F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106946.958:2588): pid=27069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106946.960:2589): pid=27069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106947.115:2590): pid=27069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106947.116:2591): pid=27069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106947.119:2592): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106947.120:2593): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106947.187:2594): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106947.187:2595): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106947.253:2596): pid=27087 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106947.254:2597): pid=27087 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7774676D776C6F706F7566686F6E78686A666D6F656175696772766770786E70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106947.254:2598): pid=27087 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106947.257:2599): pid=27087 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106947.410:2600): pid=27087 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106947.410:2601): pid=27087 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106947.414:2602): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106947.414:2603): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106947.677:2604): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106947.677:2605): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106947.736:2606): pid=27103 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106947.736:2607): pid=27103 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7271636975717370756378756267736F6275737A616B7A7475717667636A7675203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106947.737:2608): pid=27103 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106947.739:2609): pid=27103 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106947.916:2610): pid=27103 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106947.916:2611): pid=27103 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106947.919:2612): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106947.919:2613): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106947.984:2614): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106947.984:2615): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106948.041:2616): pid=27119 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106948.042:2617): pid=27119 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7170636376706473747A787366636B68757775686D636E6674796978796161203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106948.042:2618): pid=27119 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106948.045:2619): pid=27119 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106948.224:2620): pid=27119 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106948.224:2621): pid=27119 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106948.229:2622): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106948.229:2623): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106948.297:2624): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106948.297:2625): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106948.361:2626): pid=27137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106948.361:2627): pid=27137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F627064636D68786C716A787A7371617861656B706570666B7269666976666B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106948.362:2628): pid=27137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106948.364:2629): pid=27137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106948.546:2630): pid=27137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106948.546:2631): pid=27137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106948.549:2632): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106948.549:2633): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106948.787:2634): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106948.787:2635): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106948.843:2636): pid=27156 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106948.843:2637): pid=27156 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766365786C6D76766F66686C656165666C6569706479656F6F6B706667627570203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106948.843:2638): pid=27156 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106948.845:2639): pid=27156 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106949.020:2640): pid=27156 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106949.020:2641): pid=27156 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106949.023:2642): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106949.023:2643): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106949.128:2644): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106949.128:2645): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106949.173:2646): pid=27172 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106949.174:2647): pid=27172 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7378747570776879667267767769746E736D656E716D616971726273666A69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106949.175:2648): pid=27172 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106949.177:2649): pid=27172 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106949.321:2650): pid=27172 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106949.322:2651): pid=27172 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106949.325:2652): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106949.325:2653): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106949.409:2654): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106949.409:2655): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106949.436:2656): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106949.436:2657): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106949.458:2658): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106949.458:2659): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106949.516:2660): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106949.516:2661): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106949.541:2662): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106949.541:2663): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106949.605:2664): pid=27220 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106949.605:2665): pid=27220 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A617664646C69626E7461796F667775676E646B747A77786F69786877687070203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106949.606:2666): pid=27220 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106949.609:2667): pid=27220 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106949.776:2668): pid=27220 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106949.777:2669): pid=27220 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106949.781:2670): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106949.781:2671): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106949.809:2672): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106949.809:2673): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106949.845:2674): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106949.846:2675): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106949.864:2676): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106949.865:2677): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106949.896:2678): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106949.896:2679): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106949.921:2680): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106949.921:2681): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106949.982:2682): pid=27263 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106949.982:2683): pid=27263 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D797A75617672656F626476746B6B74776A78657670776C6F6E69746F766C6361203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106949.983:2684): pid=27263 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106949.985:2685): pid=27263 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106950.166:2686): pid=27263 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106950.166:2687): pid=27263 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106950.170:2688): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106950.170:2689): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106950.194:2690): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106950.195:2691): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106950.225:2692): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106950.225:2693): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106950.729:2694): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106950.729:2695): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106950.786:2696): pid=27293 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106950.786:2697): pid=27293 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657566797A76756B707A78777479626E6D6779736A6B6F6A697165776B767A62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106950.787:2698): pid=27293 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106950.789:2699): pid=27293 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106950.973:2700): pid=27293 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106950.973:2701): pid=27293 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106950.975:2702): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106950.975:2703): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106951.070:2704): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106951.070:2705): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106951.115:2706): pid=27310 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106951.116:2707): pid=27310 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64776B77736B70747A7169796F716A757466766475636C6965696C6B73646E6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106951.116:2708): pid=27310 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106951.118:2709): pid=27310 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770106954.650:2710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rf875e3806dd044bc9a470cddc872fea5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770106954.901:2711): prog-id=118 op=LOAD type=BPF msg=audit(1770106954.901:2712): prog-id=119 op=LOAD type=BPF msg=audit(1770106954.901:2713): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106954.901:2714): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106954.901:2715): prog-id=120 op=LOAD type=BPF msg=audit(1770106954.901:2716): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106954.904:2717): prog-id=121 op=LOAD type=BPF msg=audit(1770106954.904:2718): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106954.906:2719): prog-id=122 op=LOAD type=BPF msg=audit(1770106954.906:2720): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106954.906:2721): prog-id=123 op=LOAD type=BPF msg=audit(1770106954.906:2722): prog-id=124 op=LOAD type=BPF msg=audit(1770106954.906:2723): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106954.906:2724): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106954.907:2725): prog-id=125 op=LOAD type=BPF msg=audit(1770106954.907:2726): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106954.907:2727): prog-id=126 op=LOAD type=BPF msg=audit(1770106954.907:2728): prog-id=127 op=LOAD type=BPF msg=audit(1770106954.907:2729): prog-id=0 op=UNLOAD type=BPF msg=audit(1770106954.907:2730): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1770106954.978:2731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770106955.080:2732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770106955.080:2733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770106955.083:2734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rf875e3806dd044bc9a470cddc872fea5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770106956.348:2735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770106956.378:2736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r29863a51f22d4622b88619107e225489 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SOFTWARE_UPDATE msg=audit(1770106956.382:2737): pid=27312 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="tuned-2.26.0-1.el9fdp.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770106956.382:2738): pid=27312 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="tuned-profiles-cpu-partitioning-2.26.0-1.el9fdp.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770106956.624:2739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770106956.624:2740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770106956.627:2741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r29863a51f22d4622b88619107e225489 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770106957.219:2742): pid=27310 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106957.219:2743): pid=27310 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106957.222:2744): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106957.222:2745): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106957.305:2746): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106957.306:2747): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106957.373:2748): pid=27747 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106957.373:2749): pid=27747 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7172696E746969776368757A767364757766756566626E676376677665786371203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106957.375:2750): pid=27747 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106957.380:2751): pid=27747 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770106957.736:2752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770106958.998:2753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770106959.024:2754): pid=27747 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106959.025:2755): pid=27747 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106959.029:2756): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106959.029:2757): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106959.107:2758): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106959.107:2759): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106959.160:2760): pid=27942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106959.160:2761): pid=27942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616277766D64717976616E6F776B6674656C706E68647175686F7671746D6568203B20504154483D2F62696E3A2F7573722F62696E3A2F7362696E3A2F7573722F7362696E202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106959.161:2762): pid=27942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106959.165:2763): pid=27942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106959.346:2764): pid=27942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106959.346:2765): pid=27942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106959.350:2766): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106959.350:2767): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106959.837:2768): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106959.837:2769): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106959.895:2770): pid=27959 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106959.896:2771): pid=27959 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F736375716D726D7A787675627861707A6C6969776264777666736279746370203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106959.896:2772): pid=27959 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106959.898:2773): pid=27959 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106960.065:2774): pid=27959 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106960.065:2775): pid=27959 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106960.067:2776): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106960.067:2777): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106960.156:2778): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106960.156:2779): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106960.215:2780): pid=27975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106960.215:2781): pid=27975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786E716777766770616A65636B647362647365786E75737A7979707666776F6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106960.216:2782): pid=27975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106960.218:2783): pid=27975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106960.389:2784): pid=27975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106960.389:2785): pid=27975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106960.393:2786): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106960.393:2787): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106960.653:2788): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106960.653:2789): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106960.708:2790): pid=27991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106960.709:2791): pid=27991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B67656873707665736C6D737A6F6F6477666F6F6279626B6B6170766C7A6962203B20504154483D2F62696E3A2F7573722F62696E3A2F7362696E3A2F7573722F7362696E202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106960.709:2792): pid=27991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106960.711:2793): pid=27991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106962.080:2794): pid=27991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106962.081:2795): pid=27991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106962.085:2796): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106962.085:2797): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106962.340:2798): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106962.340:2799): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106962.388:2800): pid=28012 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106962.388:2801): pid=28012 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C756C7278666872766B736161777663667677736A797A667174707376706B61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106962.389:2802): pid=28012 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106962.391:2803): pid=28012 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106962.576:2804): pid=28012 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106962.577:2805): pid=28012 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106962.582:2806): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106962.582:2807): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106962.681:2808): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106962.681:2809): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106962.741:2810): pid=28029 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106962.742:2811): pid=28029 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716764696865656D6B6F6E77666C75677165696E6466767A72646E6C65647062203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106962.742:2812): pid=28029 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106962.745:2813): pid=28029 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106962.892:2814): pid=28029 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106962.892:2815): pid=28029 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106962.895:2816): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106962.895:2817): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106963.869:2818): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106963.869:2819): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106963.923:2820): pid=28045 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106963.923:2821): pid=28045 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F666E6669747772657A666875616D626564646A69636174696D717266666B79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106963.924:2822): pid=28045 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106963.926:2823): pid=28045 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106964.098:2824): pid=28045 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106964.098:2825): pid=28045 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106964.102:2826): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106964.102:2827): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106966.035:2828): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106966.036:2829): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106966.085:2830): pid=28061 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106966.085:2831): pid=28061 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77656B736F726A6170796C726B797073716A67617379646A6F6B737579626E76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106966.086:2832): pid=28061 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106966.088:2833): pid=28061 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106966.229:2834): pid=28061 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106966.230:2835): pid=28061 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106966.233:2836): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106966.233:2837): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106966.346:2838): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106966.346:2839): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106966.373:2840): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106966.374:2841): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106966.393:2842): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106966.393:2843): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106966.428:2844): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106966.428:2845): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106966.448:2846): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106966.448:2847): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106966.505:2848): pid=28109 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106966.505:2849): pid=28109 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6E776276686276786B617A77756B7A6F7665737373676B65756F636E6E6D75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106966.506:2850): pid=28109 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106966.509:2851): pid=28109 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106966.685:2852): pid=28109 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106966.685:2853): pid=28109 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106966.689:2854): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106966.689:2855): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106966.715:2856): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106966.715:2857): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106966.745:2858): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106966.745:2859): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106966.767:2860): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106966.767:2861): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106966.795:2862): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106966.795:2863): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106966.820:2864): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106966.820:2865): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106966.867:2866): pid=28154 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106966.867:2867): pid=28154 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7578787672656B6861736E6D7472666676777671737072756F78756469756B67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106966.868:2868): pid=28154 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106966.870:2869): pid=28154 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106967.013:2870): pid=28154 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106967.013:2871): pid=28154 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106967.017:2872): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106967.017:2873): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106967.035:2874): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106967.035:2875): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106967.065:2876): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106967.065:2877): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106967.135:2878): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106967.136:2879): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106967.181:2880): pid=28184 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106967.181:2881): pid=28184 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B706B796A75786E6B7673656D716B6868747679796B7174726A616E6165637A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106967.182:2882): pid=28184 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106967.185:2883): pid=28184 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106967.349:2884): pid=28184 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106967.350:2885): pid=28184 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106967.354:2886): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106967.354:2887): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106967.527:2888): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106967.527:2889): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106967.556:2890): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106967.556:2891): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106967.574:2892): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106967.574:2893): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106967.610:2894): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106967.610:2895): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106967.631:2896): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106967.632:2897): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106967.681:2898): pid=28232 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106967.681:2899): pid=28232 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756C6D7A7A6369766367616A70696E6669656A676C6B6E6664696D6370786571203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106967.681:2900): pid=28232 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106967.683:2901): pid=28232 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106967.852:2902): pid=28232 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106967.852:2903): pid=28232 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106967.856:2904): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106967.856:2905): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106967.882:2906): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106967.882:2907): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106967.909:2908): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106967.909:2909): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106967.929:2910): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106967.929:2911): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106967.956:2912): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106967.956:2913): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106967.977:2914): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106967.977:2915): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106968.031:2916): pid=28275 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106968.032:2917): pid=28275 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626A69676C6462727764636B67787A7477666B69666173706A7578726D79666D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106968.032:2918): pid=28275 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106968.034:2919): pid=28275 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106968.208:2920): pid=28275 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106968.209:2921): pid=28275 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106968.212:2922): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106968.212:2923): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106968.223:2924): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106968.223:2925): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106968.252:2926): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106968.252:2927): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106968.327:2928): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106968.327:2929): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106968.356:2930): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106968.356:2931): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106968.374:2932): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106968.374:2933): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106968.409:2934): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106968.409:2935): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106968.474:2936): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106968.474:2937): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106968.512:2938): pid=28337 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106968.512:2939): pid=28337 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75766C71696169637379626B62656E7866746D6A756F746D787668736573766A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106968.513:2940): pid=28337 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106968.514:2941): pid=28337 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106968.642:2942): pid=28337 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106968.642:2943): pid=28337 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106968.645:2944): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106968.645:2945): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106968.668:2946): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106968.668:2947): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106968.690:2948): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106968.690:2949): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106968.714:2950): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106968.714:2951): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106968.737:2952): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106968.737:2953): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106968.761:2954): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106968.761:2955): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106968.815:2956): pid=28380 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106968.816:2957): pid=28380 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65676868716F6B786B66756272696B686C6A7762636976646266636763696D75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106968.816:2958): pid=28380 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106968.819:2959): pid=28380 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106968.996:2960): pid=28380 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106968.997:2961): pid=28380 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106969.000:2962): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106969.000:2963): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106969.021:2964): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106969.021:2965): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106969.046:2966): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106969.046:2967): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106969.103:2968): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106969.103:2969): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106969.130:2970): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106969.130:2971): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106969.149:2972): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106969.149:2973): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106969.185:2974): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106969.185:2975): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106969.302:2976): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106969.302:2977): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106969.351:2978): pid=28442 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106969.352:2979): pid=28442 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636A7776666A6467656874636D697A6262686D666475686962706F7872627361203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106969.352:2980): pid=28442 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106969.355:2981): pid=28442 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106969.512:2982): pid=28442 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106969.512:2983): pid=28442 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106969.516:2984): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106969.516:2985): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106969.540:2986): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106969.540:2987): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106969.574:2988): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106969.574:2989): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106969.594:2990): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106969.595:2991): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106969.624:2992): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106969.624:2993): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106969.648:2994): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106969.648:2995): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106969.697:2996): pid=28485 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106969.697:2997): pid=28485 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6A636576657366677278796C737A6D6E6E6866637070696C6462766C74706C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106969.698:2998): pid=28485 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106969.700:2999): pid=28485 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106969.887:3000): pid=28485 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106969.887:3001): pid=28485 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106969.891:3002): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106969.891:3003): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106969.910:3004): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106969.910:3005): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106969.940:3006): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106969.940:3007): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106969.978:3008): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106969.978:3009): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106970.002:3010): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106970.002:3011): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106970.021:3012): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106970.021:3013): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106970.054:3014): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106970.054:3015): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106970.270:3016): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106970.270:3017): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106970.320:3018): pid=28547 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106970.320:3019): pid=28547 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6972756A707172626F706F72736D6375626966666863746F62776A7069756475203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106970.321:3020): pid=28547 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106970.322:3021): pid=28547 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106970.479:3022): pid=28547 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106970.480:3023): pid=28547 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106970.483:3024): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106970.483:3025): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106970.503:3026): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106970.503:3027): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106970.536:3028): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106970.536:3029): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106970.551:3030): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106970.551:3031): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106970.576:3032): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106970.577:3033): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106970.589:3034): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106970.589:3035): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106970.646:3036): pid=28590 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106970.646:3037): pid=28590 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706F7964756F686278666E717A776379786F686366696D79786B74746B62696D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106970.647:3038): pid=28590 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106970.650:3039): pid=28590 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106970.828:3040): pid=28590 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106970.828:3041): pid=28590 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106970.832:3042): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106970.832:3043): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106970.852:3044): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106970.852:3045): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106970.881:3046): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106970.881:3047): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106970.923:3048): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106970.923:3049): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106970.948:3050): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106970.948:3051): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106970.965:3052): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106970.965:3053): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106970.994:3054): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106970.994:3055): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106971.024:3056): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106971.024:3057): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106971.061:3058): pid=28652 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106971.061:3059): pid=28652 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A656E746A6B7A71666D6270626C7A7969626670666D7A67757374657A626563203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106971.061:3060): pid=28652 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106971.063:3061): pid=28652 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106971.209:3062): pid=28652 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106971.209:3063): pid=28652 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106971.213:3064): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106971.213:3065): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106971.238:3066): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106971.238:3067): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106971.265:3068): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106971.265:3069): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106971.284:3070): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106971.284:3071): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106971.306:3072): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106971.307:3073): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106971.326:3074): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106971.326:3075): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106971.378:3076): pid=28695 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106971.379:3077): pid=28695 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6C62776D767263726279777471796168746472646D727A696F646E70637373203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106971.379:3078): pid=28695 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106971.381:3079): pid=28695 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106971.532:3080): pid=28695 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106971.532:3081): pid=28695 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106971.536:3082): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106971.536:3083): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106971.554:3084): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106971.555:3085): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106971.583:3086): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106971.583:3087): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106971.620:3088): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106971.620:3089): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106971.647:3090): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106971.648:3091): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106971.664:3092): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106971.664:3093): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106971.690:3094): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106971.690:3095): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106971.761:3096): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106971.761:3097): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106971.814:3098): pid=28757 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106971.814:3099): pid=28757 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72766661647461617A7067646F7A6F676E736F656F6B6F756B67716363696261203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106971.815:3100): pid=28757 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106971.817:3101): pid=28757 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106971.985:3102): pid=28757 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106971.986:3103): pid=28757 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106971.989:3104): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106971.989:3105): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106972.016:3106): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106972.016:3107): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106972.054:3108): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106972.054:3109): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106972.074:3110): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106972.074:3111): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106972.105:3112): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106972.105:3113): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106972.124:3114): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106972.124:3115): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106972.190:3116): pid=28800 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106972.191:3117): pid=28800 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71716D66796D666B766D6A727578737476786A616561706964626C77616C6974203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106972.191:3118): pid=28800 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106972.193:3119): pid=28800 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106972.351:3120): pid=28800 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106972.351:3121): pid=28800 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106972.355:3122): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106972.355:3123): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106972.377:3124): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106972.377:3125): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106972.410:3126): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106972.410:3127): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106972.472:3128): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106972.472:3129): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106972.504:3130): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106972.504:3131): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106972.525:3132): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106972.525:3133): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106972.564:3134): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106972.564:3135): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106972.610:3136): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106972.610:3137): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106972.676:3138): pid=28862 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106972.676:3139): pid=28862 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62786266646D777964777A7175727363766D6F726F78796C766F70656B65626D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106972.677:3140): pid=28862 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106972.680:3141): pid=28862 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106972.873:3142): pid=28862 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106972.874:3143): pid=28862 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106972.877:3144): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106972.877:3145): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106972.903:3146): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106972.903:3147): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106972.926:3148): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106972.927:3149): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106972.947:3150): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106972.947:3151): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106972.970:3152): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106972.970:3153): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106972.991:3154): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106972.991:3155): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106973.031:3156): pid=28905 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106973.032:3157): pid=28905 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A776A656162727963756E7375716569616861757370776973616974706F6462203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106973.032:3158): pid=28905 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106973.034:3159): pid=28905 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106973.167:3160): pid=28905 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106973.167:3161): pid=28905 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106973.174:3162): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106973.174:3163): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106973.197:3164): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106973.197:3165): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106973.226:3166): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106973.226:3167): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106973.288:3168): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106973.288:3169): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106973.315:3170): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106973.315:3171): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106973.335:3172): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106973.335:3173): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106973.369:3174): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106973.369:3175): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106973.424:3176): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106973.424:3177): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106973.473:3178): pid=28967 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106973.473:3179): pid=28967 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697A7974646A7065636569697970786B66726367746C776379646A6D6E79636D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106973.474:3180): pid=28967 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106973.476:3181): pid=28967 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106973.646:3182): pid=28967 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106973.646:3183): pid=28967 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106973.650:3184): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106973.650:3185): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106973.681:3186): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106973.681:3187): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106973.717:3188): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106973.717:3189): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106973.742:3190): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106973.742:3191): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106973.773:3192): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106973.773:3193): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106973.798:3194): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106973.798:3195): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106973.849:3196): pid=29010 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106973.849:3197): pid=29010 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7A717A6D746C66717269676C636B7363697A636B6D69696B666B646A6B7365203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106973.850:3198): pid=29010 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106973.851:3199): pid=29010 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106974.028:3200): pid=29010 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106974.029:3201): pid=29010 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106974.032:3202): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106974.032:3203): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106974.057:3204): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106974.057:3205): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106974.086:3206): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106974.086:3207): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106974.152:3208): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106974.152:3209): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106974.182:3210): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106974.182:3211): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106974.203:3212): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106974.203:3213): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106974.235:3214): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106974.235:3215): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106974.294:3216): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106974.294:3217): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106974.355:3218): pid=29072 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106974.355:3219): pid=29072 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736B6D77676A616B647A687071716A666671626F69737267636D6C6F7A72676A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106974.356:3220): pid=29072 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106974.358:3221): pid=29072 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106974.532:3222): pid=29072 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106974.533:3223): pid=29072 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106974.537:3224): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106974.537:3225): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106974.564:3226): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106974.564:3227): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106974.599:3228): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106974.599:3229): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106974.646:3230): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106974.646:3231): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106974.680:3232): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106974.680:3233): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106974.702:3234): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106974.702:3235): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106974.761:3236): pid=29115 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106974.761:3237): pid=29115 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70727A6C7A7264776C7362736C67797474796667676B7777646F746D64646676203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106974.762:3238): pid=29115 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106974.765:3239): pid=29115 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106974.931:3240): pid=29115 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106974.932:3241): pid=29115 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106974.935:3242): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106974.935:3243): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106974.952:3244): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106974.952:3245): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106974.982:3246): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106974.982:3247): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106975.022:3248): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106975.022:3249): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106975.050:3250): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106975.050:3251): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106975.067:3252): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106975.067:3253): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106975.101:3254): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106975.101:3255): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106975.146:3256): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106975.146:3257): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106975.207:3258): pid=29177 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106975.208:3259): pid=29177 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717778706D6C6F626A7A687772687975756E756D687461626B636B6E63796D73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106975.208:3260): pid=29177 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106975.211:3261): pid=29177 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106975.375:3262): pid=29177 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106975.376:3263): pid=29177 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106975.380:3264): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106975.380:3265): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106975.405:3266): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106975.405:3267): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106975.442:3268): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106975.442:3269): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106975.461:3270): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106975.462:3271): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106975.495:3272): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106975.495:3273): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106975.517:3274): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106975.517:3275): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106975.580:3276): pid=29220 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106975.580:3277): pid=29220 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69637276677A657970636C6D777375717564677A736E70746C726B6F63617A6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106975.581:3278): pid=29220 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106975.584:3279): pid=29220 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106975.759:3280): pid=29220 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106975.759:3281): pid=29220 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106975.764:3282): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106975.764:3283): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106975.783:3284): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106975.783:3285): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106975.814:3286): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106975.815:3287): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106975.856:3288): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106975.856:3289): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106975.887:3290): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106975.888:3291): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106975.905:3292): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106975.906:3293): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106975.942:3294): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106975.942:3295): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106975.983:3296): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106975.983:3297): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106976.043:3298): pid=29282 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106976.044:3299): pid=29282 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736A726C726A62616269647863617379796F6667766D666A6A70646E6F646562203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106976.044:3300): pid=29282 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106976.047:3301): pid=29282 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106976.213:3302): pid=29282 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106976.213:3303): pid=29282 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106976.217:3304): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106976.217:3305): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106976.243:3306): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106976.243:3307): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106976.282:3308): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106976.282:3309): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106976.302:3310): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106976.302:3311): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106976.333:3312): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106976.333:3313): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106976.354:3314): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106976.354:3315): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106976.415:3316): pid=29325 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106976.415:3317): pid=29325 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76767A616972727376656972766D6E7170637966796670736D646C7A72676378203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106976.416:3318): pid=29325 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106976.420:3319): pid=29325 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106976.789:3320): pid=29325 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106976.790:3321): pid=29325 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106976.793:3322): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106976.793:3323): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106976.816:3324): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106976.816:3325): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106976.839:3326): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106976.839:3327): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106977.055:3328): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106977.055:3329): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106977.113:3330): pid=29355 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106977.113:3331): pid=29355 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756B6274667A766977747770636A7A79756A7467637665626B6F6962666B646D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106977.113:3332): pid=29355 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106977.115:3333): pid=29355 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106977.293:3334): pid=29355 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106977.293:3335): pid=29355 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106977.296:3336): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106977.296:3337): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106977.518:3338): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106977.518:3339): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106977.544:3340): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106977.544:3341): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106977.565:3342): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106977.565:3343): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106977.602:3344): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106977.602:3345): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106977.628:3346): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106977.628:3347): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106977.678:3348): pid=29403 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106977.678:3349): pid=29403 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76716D79787566637363676D6D68707378706A6663726B787476716B68796A71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106977.679:3350): pid=29403 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106977.681:3351): pid=29403 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106977.828:3352): pid=29403 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106977.829:3353): pid=29403 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106977.832:3354): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106977.832:3355): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106977.852:3356): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106977.852:3357): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106977.883:3358): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106977.883:3359): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106977.903:3360): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106977.903:3361): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106977.929:3362): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106977.929:3363): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106977.945:3364): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106977.945:3365): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106978.000:3366): pid=29446 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106978.001:3367): pid=29446 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7761656C66626F636666666179707779756277687367776C7A68746E7A6A75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106978.002:3368): pid=29446 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106978.004:3369): pid=29446 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106978.183:3370): pid=29446 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106978.183:3371): pid=29446 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106978.188:3372): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106978.188:3373): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106978.200:3374): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106978.201:3375): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106978.257:3376): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106978.258:3377): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106979.742:3378): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106979.742:3379): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106979.796:3380): pid=29476 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106979.796:3381): pid=29476 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65766663796176656867697373616B74626264667578747A6777656470707065203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106979.797:3382): pid=29476 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106979.799:3383): pid=29476 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106980.277:3384): pid=29476 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106980.277:3385): pid=29476 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106980.281:3386): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106980.281:3387): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106980.375:3388): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106980.376:3389): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106980.435:3390): pid=29537 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106980.435:3391): pid=29537 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6D796D6F616366736179676B7A72747069616B79766B726A75687A68697872203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106980.436:3392): pid=29537 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106980.439:3393): pid=29537 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106984.659:3394): pid=29537 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106984.659:3395): pid=29537 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106984.665:3396): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106984.665:3397): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106984.783:3398): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106984.783:3399): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106984.837:3400): pid=29555 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106984.837:3401): pid=29555 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6F6D786763796A646D7A6F6F77716D6873747467727662787A737474717177203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106984.837:3402): pid=29555 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106984.840:3403): pid=29555 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106989.054:3404): pid=29555 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106989.054:3405): pid=29555 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106989.058:3406): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106989.058:3407): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106989.471:3408): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106989.471:3409): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106989.532:3410): pid=29572 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106989.532:3411): pid=29572 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767174647266776B79736B766C70727A65666879677166657866626E6F666670203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106989.533:3412): pid=29572 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106989.536:3413): pid=29572 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106989.728:3414): pid=29572 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106989.728:3415): pid=29572 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106989.750:3416): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106989.750:3417): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106990.079:3418): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106990.080:3419): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106990.140:3420): pid=29595 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106990.140:3421): pid=29595 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76796F6D7A616A6F6470637263737A6F6A656174616F7974777A7471776F686B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106990.141:3422): pid=29595 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106990.143:3423): pid=29595 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106990.331:3424): pid=29595 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106990.332:3425): pid=29595 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106990.335:3426): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106990.335:3427): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106990.702:3428): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106990.703:3429): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106990.762:3430): pid=29618 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106990.762:3431): pid=29618 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636668796978716871647A717777676B69626E766F7968757964647977637863203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106990.763:3432): pid=29618 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106990.765:3433): pid=29618 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106990.966:3434): pid=29618 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106990.966:3435): pid=29618 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106990.971:3436): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106990.971:3437): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106991.321:3438): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106991.321:3439): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106991.384:3440): pid=29641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106991.384:3441): pid=29641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67686C7078627664756B636C6461756C70756C6D71766A61796C627075657666203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106991.385:3442): pid=29641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106991.388:3443): pid=29641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106991.579:3444): pid=29641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106991.579:3445): pid=29641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106991.583:3446): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106991.583:3447): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106991.929:3448): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106991.930:3449): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106991.992:3450): pid=29664 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106991.993:3451): pid=29664 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716372797668636872766A74707A78736E746676696C69657669637078646465203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106991.994:3452): pid=29664 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106991.997:3453): pid=29664 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106992.181:3454): pid=29664 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106992.181:3455): pid=29664 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106992.185:3456): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106992.185:3457): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106992.653:3458): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106992.653:3459): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106992.703:3460): pid=29687 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106992.704:3461): pid=29687 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70706E736374686C6679746564627163796B666B6D7375696E6262666A796D67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106992.704:3462): pid=29687 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106992.706:3463): pid=29687 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106992.894:3464): pid=29687 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106992.894:3465): pid=29687 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106992.897:3466): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106992.897:3467): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106992.988:3468): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106992.988:3469): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106993.016:3470): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106993.016:3471): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106993.032:3472): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106993.032:3473): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106993.066:3474): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106993.066:3475): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106993.085:3476): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106993.085:3477): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106993.141:3478): pid=29735 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106993.141:3479): pid=29735 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71627068696874696F72636F6E7676756479696863776D616C6875657A61746A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106993.142:3480): pid=29735 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106993.145:3481): pid=29735 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106993.329:3482): pid=29735 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106993.329:3483): pid=29735 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106993.371:3484): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106993.371:3485): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106993.395:3486): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106993.395:3487): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106993.447:3488): pid=29753 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106993.448:3489): pid=29753 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63756B6478656976696D6B7A69667069736E726C647072766969727368677463203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106993.448:3490): pid=29753 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106993.450:3491): pid=29753 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106993.627:3492): pid=29753 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106993.627:3493): pid=29753 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106993.631:3494): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106993.631:3495): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106993.656:3496): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106993.656:3497): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106993.683:3498): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106993.683:3499): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106993.790:3500): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106993.791:3501): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106993.850:3502): pid=29783 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106993.850:3503): pid=29783 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6E7165796B7076616C68626D7477776F68636375637363746B656C636C6C67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106993.851:3504): pid=29783 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106993.854:3505): pid=29783 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106994.024:3506): pid=29783 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106994.024:3507): pid=29783 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106994.028:3508): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106994.028:3509): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106994.209:3510): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106994.209:3511): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106994.237:3512): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106994.237:3513): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106994.256:3514): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106994.256:3515): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106994.294:3516): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106994.294:3517): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106994.316:3518): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106994.316:3519): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106994.375:3520): pid=29831 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106994.375:3521): pid=29831 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B72786A726F706B786C6D6B617A767A6178796979786F776566737577737874203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106994.376:3522): pid=29831 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106994.378:3523): pid=29831 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106994.557:3524): pid=29831 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106994.557:3525): pid=29831 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106994.560:3526): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106994.560:3527): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106994.581:3528): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106994.581:3529): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106994.640:3530): pid=29849 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106994.640:3531): pid=29849 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A70696A6A6377737A726E64716470676F6E7968766C72776F6D6E7464796362203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106994.641:3532): pid=29849 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106994.644:3533): pid=29849 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106994.818:3534): pid=29849 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106994.818:3535): pid=29849 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106994.821:3536): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106994.822:3537): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106994.840:3538): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106994.840:3539): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106994.871:3540): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106994.871:3541): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106994.976:3542): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106994.976:3543): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106995.005:3544): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106995.005:3545): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106995.023:3546): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106995.024:3547): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106995.059:3548): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106995.059:3549): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106995.123:3550): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106995.123:3551): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106995.182:3552): pid=29911 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106995.183:3553): pid=29911 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68796661766274696F6E647271697A6A7767687865707A796D6978796665727A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106995.184:3554): pid=29911 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106995.186:3555): pid=29911 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106995.370:3556): pid=29911 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106995.370:3557): pid=29911 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106995.374:3558): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106995.374:3559): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106995.396:3560): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106995.396:3561): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106995.441:3562): pid=29929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106995.441:3563): pid=29929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65786874786E6C636C6B6C646E636F72706B696A77676C636477666F6C747265203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106995.442:3564): pid=29929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106995.445:3565): pid=29929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106995.622:3566): pid=29929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106995.622:3567): pid=29929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106995.626:3568): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106995.626:3569): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106995.646:3570): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106995.646:3571): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106995.676:3572): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106995.676:3573): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106995.728:3574): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106995.729:3575): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106995.758:3576): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106995.758:3577): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106995.778:3578): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106995.778:3579): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106995.812:3580): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106995.813:3581): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106995.924:3582): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106995.925:3583): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106995.989:3584): pid=29991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106995.989:3585): pid=29991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6F6B726F63676D7A656B62676B7665747671686B626A7A706C65717172636D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106995.989:3586): pid=29991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106995.992:3587): pid=29991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106996.162:3588): pid=29991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106996.162:3589): pid=29991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106996.166:3590): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106996.166:3591): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106996.188:3592): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106996.188:3593): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106996.241:3594): pid=30009 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106996.241:3595): pid=30009 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777169636E6A7075797963747563616B616A6F7762666164666A736961676D76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106996.242:3596): pid=30009 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106996.244:3597): pid=30009 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106996.428:3598): pid=30009 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106996.428:3599): pid=30009 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106996.432:3600): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106996.432:3601): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106996.452:3602): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106996.452:3603): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106996.479:3604): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106996.479:3605): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106996.521:3606): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106996.521:3607): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106996.551:3608): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106996.551:3609): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106996.584:3610): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106996.584:3611): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106996.618:3612): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106996.618:3613): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106996.800:3614): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106996.800:3615): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106996.858:3616): pid=30071 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106996.858:3617): pid=30071 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627663686E796E706E77646A7871796D63706A63656C676E626979626472616A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106996.859:3618): pid=30071 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106996.861:3619): pid=30071 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106997.042:3620): pid=30071 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106997.042:3621): pid=30071 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106997.046:3622): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106997.046:3623): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106997.063:3624): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106997.063:3625): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106997.113:3626): pid=30089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106997.114:3627): pid=30089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6961797673706F746D666C6374616F6F6574777763696F77767A726470737464203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106997.115:3628): pid=30089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106997.117:3629): pid=30089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106997.265:3630): pid=30089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106997.265:3631): pid=30089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106997.269:3632): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106997.269:3633): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106997.289:3634): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106997.289:3635): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106997.317:3636): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106997.317:3637): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106997.389:3638): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106997.389:3639): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106997.419:3640): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106997.419:3641): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106997.437:3642): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106997.437:3643): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106997.472:3644): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106997.472:3645): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106997.497:3646): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106997.497:3647): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106997.551:3648): pid=30151 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106997.552:3649): pid=30151 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666E626C6766686B6C70706764696B697567726A67646A6E6769726B706B6977203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106997.552:3650): pid=30151 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106997.555:3651): pid=30151 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106997.742:3652): pid=30151 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106997.742:3653): pid=30151 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106997.745:3654): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106997.745:3655): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106997.766:3656): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106997.766:3657): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106997.811:3658): pid=30169 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106997.812:3659): pid=30169 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767A7572776E656574686D6C736E7571686B647367716A786A7A6F676F7A7966203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106997.812:3660): pid=30169 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106997.815:3661): pid=30169 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106997.951:3662): pid=30169 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106997.952:3663): pid=30169 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106997.955:3664): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106997.955:3665): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106997.975:3666): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106997.975:3667): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106998.003:3668): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106998.003:3669): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106998.052:3670): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106998.053:3671): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106998.081:3672): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106998.081:3673): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106998.096:3674): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106998.096:3675): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106998.127:3676): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106998.128:3677): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106998.199:3678): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106998.199:3679): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106998.244:3680): pid=30231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106998.244:3681): pid=30231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76686E6E79666A7370736377737A7876716876776177626B716567736961666A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106998.245:3682): pid=30231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106998.247:3683): pid=30231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106998.429:3684): pid=30231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106998.430:3685): pid=30231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106998.434:3686): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106998.434:3687): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106998.449:3688): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106998.449:3689): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106998.506:3690): pid=30249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106998.506:3691): pid=30249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6465716D67696875706C77796862637769687A6D6E6D7A71626A7567736D766F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106998.507:3692): pid=30249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106998.510:3693): pid=30249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106998.682:3694): pid=30249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106998.683:3695): pid=30249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106998.687:3696): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106998.687:3697): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106998.706:3698): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106998.706:3699): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106998.737:3700): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106998.737:3701): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106998.775:3702): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106998.775:3703): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106998.799:3704): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106998.799:3705): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106998.819:3706): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106998.819:3707): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106998.855:3708): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106998.855:3709): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106998.898:3710): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106998.898:3711): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106998.961:3712): pid=30311 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106998.961:3713): pid=30311 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676867776D7072766E66637264656E6D6B766E647970647978656E6D61687367203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106998.962:3714): pid=30311 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106998.964:3715): pid=30311 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106999.136:3716): pid=30311 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106999.136:3717): pid=30311 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106999.139:3718): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106999.139:3719): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106999.162:3720): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106999.163:3721): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106999.214:3722): pid=30329 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106999.215:3723): pid=30329 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77706B636370666B6B6E77686879666470696974627078706A7761766B696973203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106999.215:3724): pid=30329 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106999.216:3725): pid=30329 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106999.391:3726): pid=30329 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106999.391:3727): pid=30329 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106999.395:3728): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106999.395:3729): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106999.416:3730): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106999.416:3731): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106999.446:3732): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106999.446:3733): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106999.502:3734): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106999.503:3735): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106999.531:3736): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106999.532:3737): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106999.553:3738): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106999.553:3739): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770106999.589:3740): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106999.589:3741): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106999.648:3742): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106999.648:3743): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106999.710:3744): pid=30391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106999.710:3745): pid=30391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6C6F6A636D6F72676C61726C75736B63656B6671646D6B7A77736164627475203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106999.711:3746): pid=30391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106999.715:3747): pid=30391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106999.895:3748): pid=30391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770106999.895:3749): pid=30391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770106999.901:3750): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770106999.901:3751): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770106999.921:3752): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770106999.921:3753): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770106999.970:3754): pid=30409 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770106999.970:3755): pid=30409 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627970707A6D71736561616877726C636E6A6C6D686C6167696269666264726F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770106999.971:3756): pid=30409 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770106999.973:3757): pid=30409 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107000.132:3758): pid=30409 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107000.132:3759): pid=30409 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107000.136:3760): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107000.137:3761): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107000.160:3762): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107000.160:3763): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107000.193:3764): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107000.193:3765): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107000.243:3766): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107000.243:3767): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107000.274:3768): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107000.274:3769): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107000.295:3770): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107000.295:3771): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107000.327:3772): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107000.327:3773): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107000.379:3774): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107000.379:3775): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107000.440:3776): pid=30471 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107000.440:3777): pid=30471 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647376656F736961766171756576717373656F74616668726E76776271786B6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107000.442:3778): pid=30471 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107000.445:3779): pid=30471 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107000.631:3780): pid=30471 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107000.632:3781): pid=30471 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107000.636:3782): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107000.636:3783): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107000.655:3784): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107000.656:3785): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107000.720:3786): pid=30489 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107000.720:3787): pid=30489 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667773636C6E716F6B75646B6E6B7264726E7A6B616B7577726F707A6C6C6E79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107000.722:3788): pid=30489 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107000.725:3789): pid=30489 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107000.946:3790): pid=30489 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107000.947:3791): pid=30489 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107000.951:3792): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107000.951:3793): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107000.968:3794): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107000.969:3795): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107000.997:3796): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107000.997:3797): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107001.046:3798): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107001.046:3799): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107001.070:3800): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107001.070:3801): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107001.085:3802): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107001.086:3803): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107001.117:3804): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107001.117:3805): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107001.162:3806): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107001.162:3807): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107001.227:3808): pid=30551 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107001.228:3809): pid=30551 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A786C696A74747370697475767A677877717279646B686B6A7A7A6D6F726D75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107001.229:3810): pid=30551 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107001.232:3811): pid=30551 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107001.407:3812): pid=30551 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107001.408:3813): pid=30551 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107001.412:3814): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107001.412:3815): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107001.433:3816): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107001.433:3817): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107001.494:3818): pid=30569 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107001.494:3819): pid=30569 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6666776E66766D7A67646A6D73766C7776746A697A7A736D77646476746C6170203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107001.495:3820): pid=30569 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107001.498:3821): pid=30569 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107001.669:3822): pid=30569 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107001.669:3823): pid=30569 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107001.673:3824): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107001.673:3825): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107001.691:3826): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107001.691:3827): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107001.722:3828): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107001.722:3829): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107001.775:3830): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107001.775:3831): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107001.806:3832): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107001.807:3833): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107001.834:3834): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107001.834:3835): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107001.871:3836): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107001.871:3837): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107001.919:3838): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107001.919:3839): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107001.981:3840): pid=30631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107001.981:3841): pid=30631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B766162726779696C6A6C646278697A66776E62776365626762617A69747868203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107001.982:3842): pid=30631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107001.984:3843): pid=30631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107002.170:3844): pid=30631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107002.170:3845): pid=30631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107002.174:3846): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107002.174:3847): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107002.204:3848): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107002.204:3849): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107002.240:3850): pid=30649 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107002.240:3851): pid=30649 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666C656C6A61766D677679736A6663616C6C6F706574776F7A676D74636C7165203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107002.240:3852): pid=30649 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107002.242:3853): pid=30649 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107002.429:3854): pid=30649 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107002.429:3855): pid=30649 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107002.432:3856): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107002.432:3857): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107002.451:3858): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107002.451:3859): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107002.479:3860): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107002.479:3861): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107002.669:3862): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107002.669:3863): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107002.702:3864): pid=30679 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107002.702:3865): pid=30679 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79616378666978716177796A796E6D7965626768626C746763656578756D787A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107002.702:3866): pid=30679 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107002.704:3867): pid=30679 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107002.840:3868): pid=30679 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107002.840:3869): pid=30679 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107002.844:3870): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107002.844:3871): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107003.057:3872): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107003.057:3873): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107003.089:3874): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107003.089:3875): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107003.108:3876): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107003.108:3877): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107003.147:3878): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107003.147:3879): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107003.171:3880): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107003.171:3881): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107003.228:3882): pid=30727 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107003.228:3883): pid=30727 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6A686575697661757676636D6D7A786764647A6364647164797A6E6A617A66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107003.229:3884): pid=30727 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107003.231:3885): pid=30727 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107003.402:3886): pid=30727 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107003.402:3887): pid=30727 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107003.443:3888): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107003.443:3889): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107003.466:3890): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107003.466:3891): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107003.518:3892): pid=30745 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107003.518:3893): pid=30745 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61767969666271766168766C666D676C6664796F66626363696D676D726A6269203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107003.518:3894): pid=30745 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107003.520:3895): pid=30745 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107003.698:3896): pid=30745 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107003.699:3897): pid=30745 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107003.702:3898): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107003.703:3899): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107003.725:3900): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107003.725:3901): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107003.757:3902): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107003.758:3903): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107004.626:3904): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107004.627:3905): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107004.685:3906): pid=30775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107004.686:3907): pid=30775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7467746963736D687065766D7A796F7971646A6974616E766E6E616474726F6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107004.686:3908): pid=30775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107004.689:3909): pid=30775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107007.557:3910): pid=30775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107007.558:3911): pid=30775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107007.562:3912): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107007.562:3913): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107008.300:3914): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107008.300:3915): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107008.351:3916): pid=30792 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107008.351:3917): pid=30792 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77627A6F6D7765627A68746B7A707079696C6C7063766E74786F637178757370203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107008.352:3918): pid=30792 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107008.355:3919): pid=30792 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107008.674:3920): pid=30792 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107008.674:3921): pid=30792 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107008.678:3922): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107008.678:3923): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107008.737:3924): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107008.737:3925): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107008.798:3926): pid=30810 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107008.799:3927): pid=30810 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616877646F636574726363767870757077747461737A6D6C716E6A7479636771203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107008.799:3928): pid=30810 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107008.802:3929): pid=30810 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107009.119:3930): pid=30810 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107009.119:3931): pid=30810 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107009.123:3932): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107009.123:3933): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107009.195:3934): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107009.195:3935): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107009.255:3936): pid=30828 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107009.255:3937): pid=30828 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696C6A667367647671706A6B747A75676A6C776F6F7361676F786A6863766A63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107009.256:3938): pid=30828 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107009.258:3939): pid=30828 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107009.790:3940): prog-id=128 op=LOAD type=BPF msg=audit(1770107009.790:3941): prog-id=129 op=LOAD type=BPF msg=audit(1770107009.790:3942): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107009.790:3943): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107009.791:3944): prog-id=130 op=LOAD type=BPF msg=audit(1770107009.791:3945): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107009.794:3946): prog-id=131 op=LOAD type=BPF msg=audit(1770107009.794:3947): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107009.796:3948): prog-id=132 op=LOAD type=BPF msg=audit(1770107009.796:3949): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107009.796:3950): prog-id=133 op=LOAD type=BPF msg=audit(1770107009.796:3951): prog-id=134 op=LOAD type=BPF msg=audit(1770107009.796:3952): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107009.796:3953): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107009.797:3954): prog-id=135 op=LOAD type=BPF msg=audit(1770107009.797:3955): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107009.797:3956): prog-id=136 op=LOAD type=BPF msg=audit(1770107009.797:3957): prog-id=137 op=LOAD type=BPF msg=audit(1770107009.797:3958): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107009.797:3959): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107009.895:3960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=nftables comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107009.926:3961): pid=30828 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107009.926:3962): pid=30828 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107009.931:3963): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107009.931:3964): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107010.175:3965): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107010.175:3966): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107010.208:3967): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107010.208:3968): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107010.222:3969): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107010.222:3970): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107010.259:3971): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107010.259:3972): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107010.280:3973): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107010.280:3974): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107010.336:3975): pid=30918 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107010.337:3976): pid=30918 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626A6875626E7864756975776177726C796275736C6C666379647865676E746C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107010.338:3977): pid=30918 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107010.342:3978): pid=30918 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107010.527:3979): pid=30918 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107010.527:3980): pid=30918 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107010.531:3981): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107010.531:3982): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107010.559:3983): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107010.559:3984): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107010.590:3985): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107010.590:3986): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107010.613:3987): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107010.613:3988): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107010.644:3989): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107010.644:3990): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107010.666:3991): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107010.666:3992): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107010.728:3993): pid=30961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107010.728:3994): pid=30961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636E686F6971756261626765777A646164627472706C6C706A78666169787378203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107010.729:3995): pid=30961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107010.731:3996): pid=30961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107010.903:3997): pid=30961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107010.903:3998): pid=30961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107010.907:3999): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107010.907:4000): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107010.928:4001): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107010.928:4002): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107010.957:4003): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107010.957:4004): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107011.054:4005): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107011.054:4006): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107011.114:4007): pid=30991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107011.115:4008): pid=30991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A786D7771757764666976647A6165636B657063676B6B66616A6F6D67637078203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107011.115:4009): pid=30991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107011.118:4010): pid=30991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=NETFILTER_CFG msg=audit(1770107011.284:4011): table=filter:2 family=10 entries=4 op=nft_register_chain pid=30994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=NETFILTER_CFG msg=audit(1770107011.284:4011): table=raw:2 family=10 entries=3 op=nft_register_chain pid=30994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=NETFILTER_CFG msg=audit(1770107011.284:4011): table=nat:2 family=2 entries=5 op=nft_register_chain pid=30994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=NETFILTER_CFG msg=audit(1770107011.284:4011): table=raw:2 family=2 entries=3 op=nft_register_chain pid=30994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=NETFILTER_CFG msg=audit(1770107011.284:4011): table=filter:2 family=2 entries=4 op=nft_register_chain pid=30994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=NETFILTER_CFG msg=audit(1770107011.284:4011): table=nat:2 family=1 entries=5 op=nft_register_chain pid=30994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=NETFILTER_CFG msg=audit(1770107011.284:4011): table=raw:2 family=1 entries=3 op=nft_register_chain pid=30994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=NETFILTER_CFG msg=audit(1770107011.284:4011): table=filter:2 family=1 entries=4 op=nft_register_chain pid=30994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=SYSCALL msg=audit(1770107011.284:4011): arch=c000003e syscall=46 success=yes exit=2212 a0=3 a1=7ffcfb9abaa0 a2=0 a3=7fa062d87bc4 items=0 ppid=30993 pid=30994 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107011.284:4011): proctitle=6E6674002D66002F6574632F6E667461626C65732F69707461626C65732E6E6674 type=USER_END msg=audit(1770107011.315:4012): pid=30991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107011.315:4013): pid=30991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107011.319:4014): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107011.319:4015): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107011.607:4016): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107011.607:4017): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107011.665:4018): pid=31009 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107011.666:4019): pid=31009 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67727A65756D6F706C626C6E7A7875786F696B706D61716B6F78616C726C6C79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107011.667:4020): pid=31009 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107011.670:4021): pid=31009 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107011.843:4022): pid=31009 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107011.843:4023): pid=31009 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107011.847:4024): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107011.847:4025): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107011.938:4026): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107011.938:4027): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107011.960:4028): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107011.960:4029): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107011.973:4030): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107011.973:4031): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107012.001:4032): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107012.001:4033): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107012.098:4034): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107012.098:4035): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107012.154:4036): pid=31058 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107012.154:4037): pid=31058 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6A6B747A65657A6166786673676A787A71786C77786C63776C6B6C7A656368203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107012.155:4038): pid=31058 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107012.157:4039): pid=31058 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107012.339:4040): pid=31058 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107012.339:4041): pid=31058 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107012.342:4042): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107012.342:4043): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107012.361:4044): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107012.361:4045): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107012.387:4046): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107012.387:4047): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107012.402:4048): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107012.402:4049): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107012.430:4050): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107012.430:4051): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107012.450:4052): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107012.450:4053): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107012.508:4054): pid=31101 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107012.508:4055): pid=31101 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70666A6F616373637175656E6C7569667572696F747971686A736966766B7364203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107012.509:4056): pid=31101 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107012.511:4057): pid=31101 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107012.685:4058): pid=31101 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107012.685:4059): pid=31101 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107012.689:4060): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107012.689:4061): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107012.710:4062): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107012.710:4063): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107012.741:4064): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107012.741:4065): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107012.845:4066): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107012.845:4067): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107012.876:4068): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107012.876:4069): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107012.901:4070): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107012.901:4071): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107012.940:4072): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107012.940:4073): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107013.088:4074): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107013.088:4075): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107013.128:4076): pid=31163 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107013.128:4077): pid=31163 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A646E6570666C646C75756E717662726872617068677A7766766B7562696A76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107013.128:4078): pid=31163 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107013.130:4079): pid=31163 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107013.297:4080): pid=31163 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107013.297:4081): pid=31163 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107013.301:4082): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107013.301:4083): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107013.332:4084): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107013.332:4085): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107013.362:4086): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107013.362:4087): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107013.384:4088): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107013.384:4089): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107013.412:4090): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107013.412:4091): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107013.438:4092): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107013.438:4093): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107013.497:4094): pid=31206 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107013.497:4095): pid=31206 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76697473686B6A656476667A78726666616A67617A677167727876757375717A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107013.498:4096): pid=31206 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107013.500:4097): pid=31206 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107013.677:4098): pid=31206 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107013.677:4099): pid=31206 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107013.681:4100): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107013.681:4101): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107013.702:4102): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107013.703:4103): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107013.730:4104): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107013.730:4105): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107013.818:4106): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107013.818:4107): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107013.846:4108): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107013.846:4109): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107013.863:4110): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107013.863:4111): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107013.896:4112): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107013.896:4113): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107013.949:4114): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107013.949:4115): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107014.006:4116): pid=31268 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107014.006:4117): pid=31268 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716F6A6D72686E697069706877747168686D716D7A6161716769666B7069786B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107014.007:4118): pid=31268 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107014.010:4119): pid=31268 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107014.178:4120): pid=31268 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107014.178:4121): pid=31268 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107014.182:4122): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107014.182:4123): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107014.209:4124): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107014.209:4125): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107014.236:4126): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107014.236:4127): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107014.254:4128): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107014.254:4129): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107014.284:4130): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107014.285:4131): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107014.302:4132): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107014.302:4133): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107014.358:4134): pid=31311 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107014.359:4135): pid=31311 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736D6A6A78706867776B6361796A66646B6D6E6A7169757678716F6873746C6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107014.359:4136): pid=31311 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107014.362:4137): pid=31311 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107014.535:4138): pid=31311 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107014.536:4139): pid=31311 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107014.539:4140): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107014.540:4141): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107014.560:4142): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107014.560:4143): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107014.589:4144): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107014.589:4145): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107014.676:4146): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107014.676:4147): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107014.703:4148): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107014.703:4149): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107014.722:4150): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107014.722:4151): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107014.755:4152): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107014.755:4153): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107014.807:4154): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107014.807:4155): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107014.864:4156): pid=31373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107014.864:4157): pid=31373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686F6776616A7A766176716B726D6F64636976766F677379666671637164696C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107014.865:4158): pid=31373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107014.868:4159): pid=31373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107015.060:4160): pid=31373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107015.060:4161): pid=31373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107015.064:4162): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107015.064:4163): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107015.096:4164): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107015.096:4165): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107015.133:4166): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107015.133:4167): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107015.154:4168): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107015.154:4169): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107015.178:4170): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107015.178:4171): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107015.198:4172): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107015.198:4173): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107015.251:4174): pid=31416 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107015.251:4175): pid=31416 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A657172676E71776277666B736F707473646E676C63686F70786963666A7A66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107015.252:4176): pid=31416 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107015.254:4177): pid=31416 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107015.395:4178): pid=31416 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107015.395:4179): pid=31416 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107015.399:4180): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107015.399:4181): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107015.426:4182): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107015.426:4183): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107015.456:4184): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107015.456:4185): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107015.537:4186): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107015.537:4187): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107015.565:4188): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107015.565:4189): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107015.586:4190): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107015.586:4191): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107015.617:4192): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107015.617:4193): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107016.188:4194): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107016.188:4195): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107016.237:4196): pid=31478 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107016.237:4197): pid=31478 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D71756F63736A63646F6F7376667A6C646D6666727474626E676E7579647465203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107016.238:4198): pid=31478 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107016.241:4199): pid=31478 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107016.410:4200): pid=31478 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107016.410:4201): pid=31478 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107016.414:4202): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107016.414:4203): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107016.440:4204): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107016.440:4205): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107016.474:4206): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107016.474:4207): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107016.494:4208): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107016.494:4209): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107016.524:4210): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107016.524:4211): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107016.546:4212): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107016.546:4213): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107016.605:4214): pid=31521 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107016.605:4215): pid=31521 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686177656C767A636270737362777A70697A6B69766A787A69726B7968706E73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107016.606:4216): pid=31521 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107016.609:4217): pid=31521 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107016.791:4218): pid=31521 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107016.793:4219): pid=31521 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107016.796:4220): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107016.796:4221): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107016.821:4222): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107016.821:4223): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107016.847:4224): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107016.847:4225): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107016.934:4226): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107016.934:4227): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107016.988:4228): pid=31551 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107016.989:4229): pid=31551 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7878676E74617A69617071636B746C75626B6163786369627966696B647373203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107016.990:4230): pid=31551 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107016.992:4231): pid=31551 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107017.495:4232): pid=31551 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107017.495:4233): pid=31551 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107017.498:4234): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107017.498:4235): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107017.583:4236): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107017.583:4237): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107017.641:4238): pid=31616 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107017.641:4239): pid=31616 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73617861617073726569787368776D6F746D7465726E7878767969756E6B6371203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107017.642:4240): pid=31616 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107017.645:4241): pid=31616 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107017.841:4242): pid=31616 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107017.841:4243): pid=31616 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107017.844:4244): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107017.844:4245): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107018.013:4246): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107018.013:4247): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107018.067:4248): pid=31633 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107018.068:4249): pid=31633 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7A6E667A6670787061757A6C726965696F787A6F677379626B64686C657266203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107018.068:4250): pid=31633 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107018.070:4251): pid=31633 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=NETFILTER_CFG msg=audit(1770107018.238:4252): table=raw:3 family=1 entries=2 op=nft_register_chain pid=31636 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=NETFILTER_CFG msg=audit(1770107018.238:4252): table=filter:3 family=1 entries=1 op=nft_register_chain pid=31636 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=SYSCALL msg=audit(1770107018.238:4252): arch=c000003e syscall=46 success=yes exit=192 a0=3 a1=7fff46271610 a2=0 a3=7f819660cbc4 items=0 ppid=31635 pid=31636 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107018.238:4252): proctitle=6E6674002D66002F6574632F6E667461626C65732F747269706C656F2D636861696E732E6E6674 type=USER_END msg=audit(1770107018.250:4253): pid=31633 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107018.251:4254): pid=31633 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107018.254:4255): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107018.254:4256): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107018.391:4257): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107018.391:4258): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107018.451:4259): pid=31650 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107018.451:4260): pid=31650 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646D6D6A6E79686C72786B7769786C796B7A767A626A6F61796E78776467686A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107018.452:4261): pid=31650 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107018.455:4262): pid=31650 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=NETFILTER_CFG msg=audit(1770107018.645:4263): table=raw:4 family=1 entries=4 op=nft_register_rule pid=31655 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=NETFILTER_CFG msg=audit(1770107018.645:4263): table=filter:4 family=1 entries=62 op=nft_register_chain pid=31655 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=SYSCALL msg=audit(1770107018.645:4263): arch=c000003e syscall=46 success=yes exit=15488 a0=3 a1=7ffd78782390 a2=0 a3=7f98efa6ebc4 items=0 ppid=31653 pid=31655 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107018.645:4263): proctitle=6E6674002D66002D type=USER_END msg=audit(1770107018.658:4264): pid=31650 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107018.658:4265): pid=31650 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107018.662:4266): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107018.662:4267): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107018.788:4268): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107018.788:4269): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107018.848:4270): pid=31669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107018.849:4271): pid=31669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78637A6B636F6E766B717A7A7A756571727067626462716E787A7668666A7A6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107018.849:4272): pid=31669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107018.852:4273): pid=31669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107019.023:4274): pid=31669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107019.023:4275): pid=31669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107019.027:4276): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107019.027:4277): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107019.074:4278): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107019.074:4279): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107019.133:4280): pid=31685 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107019.133:4281): pid=31685 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656A76766D71716E796579626E786563727679677170666C687961736C746479203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107019.133:4282): pid=31685 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107019.136:4283): pid=31685 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107019.310:4284): pid=31685 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107019.311:4285): pid=31685 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107019.314:4286): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107019.314:4287): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107019.465:4288): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107019.465:4289): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107019.523:4290): pid=31701 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107019.523:4291): pid=31701 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77756E676E6D70706D616170656567676F726D737464786F7163766E70617A76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107019.524:4292): pid=31701 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107019.527:4293): pid=31701 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107019.715:4294): pid=31701 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107019.715:4295): pid=31701 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107019.719:4296): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107019.719:4297): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107019.981:4298): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107019.981:4299): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107020.038:4300): pid=31717 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107020.038:4301): pid=31717 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617077706F656D7166646179617173796D766C707267656E7176787663707270203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107020.039:4302): pid=31717 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107020.041:4303): pid=31717 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770107020.367:4304): bool=virt_sandbox_use_netlink val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=SYSCALL msg=audit(1770107020.367:4304): arch=c000003e syscall=1 success=yes exit=2 a0=5 a1=7ffeee9b6bde a2=2 a3=0 items=0 ppid=31717 pid=31719 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="python3" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107020.367:4304): proctitle="/usr/bin/python3" type=USER_END msg=audit(1770107020.911:4305): pid=31717 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107020.911:4306): pid=31717 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107020.916:4307): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107020.917:4308): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107021.975:4309): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107021.975:4310): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107022.041:4311): pid=31737 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107022.041:4312): pid=31737 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65646A796875796362766267646D777869646466627876716F6F616D6377646A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107022.042:4313): pid=31737 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107022.049:4314): pid=31737 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107022.232:4315): pid=31737 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107022.232:4316): pid=31737 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107022.236:4317): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107022.236:4318): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107022.299:4319): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107022.299:4320): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107022.356:4321): pid=31753 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107022.357:4322): pid=31753 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766B717A6C6663717A6C65727666656A74697467666C786C727477746B6E6D7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107022.357:4323): pid=31753 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107022.359:4324): pid=31753 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107022.532:4325): pid=31753 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107022.532:4326): pid=31753 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107022.536:4327): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107022.536:4328): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107022.626:4329): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107022.626:4330): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107022.690:4331): pid=31769 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107022.690:4332): pid=31769 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626268737768637A6561687276746B6763676462637768706A7167696C6A6574203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107022.691:4333): pid=31769 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107022.693:4334): pid=31769 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107027.801:4335): pid=31769 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107027.801:4336): pid=31769 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107027.805:4337): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107027.805:4338): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107028.066:4339): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107028.066:4340): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107028.118:4341): pid=31899 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107028.118:4342): pid=31899 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A677166696E67736D73756E7368726C6F686C7A6A70787A76757A7373647162203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107028.118:4343): pid=31899 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107028.120:4344): pid=31899 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=MAC_POLICY_LOAD msg=audit(1770107029.098:4345): auid=1002 ses=13 lsm=selinux res=1AUID="tripleo-admin" type=SYSCALL msg=audit(1770107029.098:4345): arch=c000003e syscall=1 success=yes exit=3546155 a0=4 a1=7fbc8b000000 a2=361c2b a3=0 items=0 ppid=31901 pid=31907 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107029.098:4345): proctitle="/sbin/load_policy" type=USER_MAC_CONFIG_CHANGE msg=audit(1770107029.277:4346): pid=31901 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/etc/iscsi(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770107029.327:4347): pid=31899 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107029.327:4348): pid=31899 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107029.332:4349): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107029.333:4350): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107029.375:4351): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107029.375:4352): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107029.440:4353): pid=31921 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107029.440:4354): pid=31921 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6D736E6371736A7966626869766469787970756E6C69616E7964756D717067203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107029.441:4355): pid=31921 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107029.447:4356): pid=31921 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=MAC_POLICY_LOAD msg=audit(1770107030.386:4357): auid=1002 ses=13 lsm=selinux res=1AUID="tripleo-admin" type=SYSCALL msg=audit(1770107030.386:4357): arch=c000003e syscall=1 success=yes exit=3546155 a0=4 a1=7fc74d200000 a2=361c2b a3=0 items=0 ppid=31923 pid=31928 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107030.386:4357): proctitle="/sbin/load_policy" type=USER_MAC_CONFIG_CHANGE msg=audit(1770107030.552:4358): pid=31923 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=modify tglob="/etc/target(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770107030.590:4359): pid=31921 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107030.591:4360): pid=31921 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107030.597:4361): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107030.597:4362): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107030.642:4363): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107030.642:4364): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107030.688:4365): pid=31942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107030.688:4366): pid=31942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7777686E61616A6273756E727968647162706C7679727866776C6E796C687778203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107030.689:4367): pid=31942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107030.695:4368): pid=31942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=MAC_POLICY_LOAD msg=audit(1770107031.535:4369): auid=1002 ses=13 lsm=selinux res=1AUID="tripleo-admin" type=SYSCALL msg=audit(1770107031.535:4369): arch=c000003e syscall=1 success=yes exit=3546155 a0=4 a1=7fd91b200000 a2=361c2b a3=0 items=0 ppid=31944 pid=31949 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107031.535:4369): proctitle="/sbin/load_policy" type=USER_MAC_CONFIG_CHANGE msg=audit(1770107031.657:4370): pid=31944 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=modify tglob="/var/lib/iscsi(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770107031.702:4371): pid=31942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107031.703:4372): pid=31942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107031.707:4373): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107031.707:4374): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107031.805:4375): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107031.805:4376): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107031.868:4377): pid=31963 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107031.868:4378): pid=31963 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776E66666F766E63796F6174746F79686A71626E617070616663716F7A7A7068203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107031.869:4379): pid=31963 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107031.875:4380): pid=31963 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107032.013:4381): pid=31963 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107032.013:4382): pid=31963 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107032.017:4383): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107032.017:4384): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107032.063:4385): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107032.064:4386): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107032.112:4387): pid=31979 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107032.113:4388): pid=31979 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746A676D71727A7768786F6F7A726C70636C7362756F6A6A617A626461687661203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107032.113:4389): pid=31979 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107032.116:4390): pid=31979 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107032.255:4391): pid=31979 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107032.255:4392): pid=31979 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107032.259:4393): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107032.259:4394): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107032.305:4395): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107032.305:4396): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107032.351:4397): pid=31995 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107032.352:4398): pid=31995 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637676776D63727767736B6E7761677A6A686975656278697267637972636769203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107032.352:4399): pid=31995 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107032.355:4400): pid=31995 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107032.504:4401): pid=31995 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107032.513:4402): pid=31995 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107032.517:4403): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107032.517:4404): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107032.567:4405): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107032.567:4406): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107032.598:4407): pid=32011 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107032.598:4408): pid=32011 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68676D6B787266717278737A6B6F627361666B646874656561717679756B7675203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107032.599:4409): pid=32011 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107032.600:4410): pid=32011 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107032.729:4411): pid=32011 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107032.729:4412): pid=32011 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107032.732:4413): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107032.732:4414): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107032.845:4415): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107032.845:4416): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107032.898:4417): pid=32027 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107032.898:4418): pid=32027 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6977706F6475667365706B796B6C7977746E71647771766177666C706C63687A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107032.899:4419): pid=32027 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107032.902:4420): pid=32027 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107033.073:4421): pid=32027 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107033.073:4422): pid=32027 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107033.075:4423): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107033.075:4424): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107033.323:4425): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107033.323:4426): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107033.400:4427): pid=32044 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107033.401:4428): pid=32044 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7A6E7464726861766B71677A726F6770657669786F6768706A656470626B77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107033.402:4429): pid=32044 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107033.408:4430): pid=32044 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107036.545:4431): pid=32046 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="dracut-config-generic-057-21.git20230214.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770107037.342:4432): pid=32044 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107037.342:4433): pid=32044 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107037.347:4434): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107037.347:4435): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107037.441:4436): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107037.442:4437): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107037.501:4438): pid=32061 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107037.501:4439): pid=32061 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626462737A766C7063756F656D6971696A656C62617162696E6F736762766274203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107037.502:4440): pid=32061 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107037.504:4441): pid=32061 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107037.677:4442): pid=32061 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107037.677:4443): pid=32061 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107037.681:4444): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107037.681:4445): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107037.748:4446): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107037.748:4447): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107037.781:4448): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107037.781:4449): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107037.801:4450): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107037.801:4451): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107037.839:4452): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107037.839:4453): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107037.886:4454): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107037.886:4455): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107037.949:4456): pid=32109 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107037.949:4457): pid=32109 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7661726D6D7471686B7266776E7A62696A6B72616F706B76636B72636C68686B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107037.950:4458): pid=32109 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107037.952:4459): pid=32109 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107038.122:4460): pid=32109 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107038.123:4461): pid=32109 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107038.127:4462): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107038.127:4463): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107038.147:4464): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107038.147:4465): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107038.187:4466): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107038.187:4467): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107038.207:4468): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107038.208:4469): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107038.240:4470): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107038.240:4471): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107038.262:4472): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107038.262:4473): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107038.319:4474): pid=32152 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107038.319:4475): pid=32152 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7369797678726468687374686B64676962646F69746763727A7164726E716C69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107038.319:4476): pid=32152 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107038.322:4477): pid=32152 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107038.497:4478): pid=32152 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107038.498:4479): pid=32152 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107038.502:4480): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107038.502:4481): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107038.522:4482): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107038.522:4483): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107038.550:4484): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107038.550:4485): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107038.639:4486): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107038.639:4487): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107038.689:4488): pid=32182 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107038.689:4489): pid=32182 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746866717778706D7371786576626563746E68627A6378666873666C77757172203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107038.690:4490): pid=32182 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107038.692:4491): pid=32182 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107038.964:4492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107039.060:4493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107039.092:4494): pid=32182 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107039.092:4495): pid=32182 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107039.096:4496): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107039.096:4497): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107039.187:4498): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107039.187:4499): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107039.216:4500): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107039.216:4501): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107039.237:4502): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107039.237:4503): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107039.270:4504): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107039.270:4505): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107039.311:4506): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107039.311:4507): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107039.369:4508): pid=32236 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107039.369:4509): pid=32236 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656B7473706D6563697769746477786663627472787268656979726570717262203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107039.370:4510): pid=32236 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107039.373:4511): pid=32236 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107039.537:4512): pid=32236 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107039.537:4513): pid=32236 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107039.541:4514): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107039.541:4515): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107039.568:4516): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107039.568:4517): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107039.607:4518): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107039.607:4519): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107039.631:4520): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107039.631:4521): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107039.662:4522): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107039.662:4523): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107039.690:4524): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107039.690:4525): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107039.748:4526): pid=32279 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107039.748:4527): pid=32279 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72776B6B6566716A63616676766562626C666C6B776D73616A7061756B6C6C69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107039.749:4528): pid=32279 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107039.751:4529): pid=32279 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107039.924:4530): pid=32279 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107039.924:4531): pid=32279 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107039.928:4532): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107039.928:4533): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107039.950:4534): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107039.950:4535): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107039.980:4536): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107039.980:4537): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107040.280:4538): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107040.280:4539): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107040.340:4540): pid=32309 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107040.341:4541): pid=32309 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727167716E6678706A7966766A626A7376766677736A6E79627070697A676A69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107040.341:4542): pid=32309 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107040.344:4543): pid=32309 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107040.524:4544): pid=32309 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107040.525:4545): pid=32309 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107040.528:4546): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107040.528:4547): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107040.599:4548): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107040.599:4549): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107040.656:4550): pid=32327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107040.656:4551): pid=32327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A797078657471687474686C78696E65646E7170766C63646164696376726263203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107040.657:4552): pid=32327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107040.659:4553): pid=32327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107040.815:4554): pid=32327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107040.815:4555): pid=32327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107040.819:4556): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107040.820:4557): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107040.890:4558): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107040.890:4559): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107040.949:4560): pid=32345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107040.949:4561): pid=32345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F666E706F6669786861766B6F656D78626A757A766A7A6E6B6E786369686975203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107040.950:4562): pid=32345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107040.952:4563): pid=32345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107041.123:4564): pid=32345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107041.123:4565): pid=32345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107041.127:4566): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107041.127:4567): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107041.197:4568): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107041.197:4569): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107041.250:4570): pid=32362 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107041.250:4571): pid=32362 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766C70686C73646F696B6D796B65737571617969747661657563777568746E6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107041.251:4572): pid=32362 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107041.253:4573): pid=32362 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107041.419:4574): pid=32362 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107041.420:4575): pid=32362 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107041.423:4576): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107041.423:4577): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107041.483:4578): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107041.483:4579): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107041.542:4580): pid=32379 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107041.543:4581): pid=32379 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656A70656766766D736C6E7377716F6C766B6776766571646E717A70746B6E70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107041.544:4582): pid=32379 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107041.547:4583): pid=32379 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107041.723:4584): pid=32379 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107041.724:4585): pid=32379 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107041.726:4586): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107041.726:4587): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107041.803:4588): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107041.803:4589): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107041.860:4590): pid=32396 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107041.861:4591): pid=32396 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7871746B646F6274767366657A756C636D696A7570717375776D6170736272203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107041.861:4592): pid=32396 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107041.864:4593): pid=32396 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107042.038:4594): pid=32396 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107042.038:4595): pid=32396 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107042.041:4596): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107042.042:4597): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107042.115:4598): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107042.115:4599): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107042.168:4600): pid=32414 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107042.168:4601): pid=32414 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72686E616D787971706C72666B74697577636F7A696E6B7978626B737A676D7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107042.168:4602): pid=32414 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107042.171:4603): pid=32414 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107042.364:4604): pid=32414 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107042.364:4605): pid=32414 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107042.367:4606): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107042.367:4607): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107042.421:4608): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107042.421:4609): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107042.470:4610): pid=32432 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107042.471:4611): pid=32432 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716D7277657A626A78736166656A7776746C6A72616A707367627A626A617A78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107042.471:4612): pid=32432 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107042.473:4613): pid=32432 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107042.651:4614): pid=32432 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107042.651:4615): pid=32432 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107042.655:4616): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107042.655:4617): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107042.733:4618): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107042.734:4619): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107042.786:4620): pid=32450 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107042.787:4621): pid=32450 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686178716C647A6F6B6A6D7174656678797779637A64686A6E616C716E777172203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107042.788:4622): pid=32450 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107042.792:4623): pid=32450 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107042.967:4624): pid=32450 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107042.967:4625): pid=32450 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107042.972:4626): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107042.972:4627): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107043.050:4628): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107043.051:4629): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107043.115:4630): pid=32468 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107043.115:4631): pid=32468 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757167656C666973736A6C786C7970667972787361736B6A6378626B74797465203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107043.116:4632): pid=32468 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107043.118:4633): pid=32468 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107043.306:4634): pid=32468 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107043.306:4635): pid=32468 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107043.310:4636): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107043.310:4637): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107043.381:4638): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107043.381:4639): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107043.438:4640): pid=32486 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107043.438:4641): pid=32486 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70647A786D6E6B65616F7A6272697678736A7063776C74706B6372666D6D6170203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107043.439:4642): pid=32486 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107043.441:4643): pid=32486 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107043.624:4644): pid=32486 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107043.624:4645): pid=32486 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107043.627:4646): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107043.628:4647): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107043.698:4648): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107043.699:4649): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107043.753:4650): pid=32504 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107043.754:4651): pid=32504 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E676C627564677A77666F796965726A7A7165707970787A697A64627477616D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107043.755:4652): pid=32504 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107043.757:4653): pid=32504 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107043.939:4654): pid=32504 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107043.939:4655): pid=32504 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107043.943:4656): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107043.943:4657): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107044.019:4658): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107044.019:4659): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107044.060:4660): pid=32522 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107044.061:4661): pid=32522 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756365787870786275746270796879646169656361736A7A6B72616173726872203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107044.061:4662): pid=32522 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107044.063:4663): pid=32522 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107044.219:4664): pid=32522 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107044.219:4665): pid=32522 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107044.223:4666): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107044.223:4667): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107044.298:4668): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107044.298:4669): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107044.359:4670): pid=32539 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107044.359:4671): pid=32539 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A65747562676A67676878767A716171706A687762786968756A7173747A6A6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107044.360:4672): pid=32539 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107044.361:4673): pid=32539 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107044.539:4674): pid=32539 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107044.539:4675): pid=32539 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107044.543:4676): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107044.543:4677): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107044.621:4678): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107044.622:4679): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107044.679:4680): pid=32556 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107044.679:4681): pid=32556 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70686D656272696A76666769656E7A68646675756F6F6A766169656C6D6E6E68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107044.680:4682): pid=32556 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107044.682:4683): pid=32556 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107044.839:4684): pid=32556 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107044.839:4685): pid=32556 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107044.842:4686): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107044.842:4687): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107044.912:4688): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107044.912:4689): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107044.946:4690): pid=32573 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107044.946:4691): pid=32573 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7975687477616F63666579716E69736674676F6964656C72736B75746B67716C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107044.947:4692): pid=32573 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107044.949:4693): pid=32573 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107045.093:4694): pid=32573 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107045.093:4695): pid=32573 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107045.097:4696): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107045.097:4697): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107045.165:4698): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107045.166:4699): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107045.214:4700): pid=32590 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107045.214:4701): pid=32590 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72686C62636175616B7363786B707A67676D656F74636A796F78717761716B69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107045.214:4702): pid=32590 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107045.216:4703): pid=32590 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107045.357:4704): pid=32590 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107045.357:4705): pid=32590 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107045.361:4706): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107045.361:4707): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107045.456:4708): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107045.456:4709): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107045.504:4710): pid=32608 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107045.504:4711): pid=32608 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F657572686C6862707366726371776C787862787869677978676B7378727170203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107045.505:4712): pid=32608 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107045.507:4713): pid=32608 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107045.813:4714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107045.837:4715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107045.861:4716): pid=32608 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107045.861:4717): pid=32608 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107045.866:4718): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107045.866:4719): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107045.982:4720): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107045.982:4721): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107046.048:4722): pid=32628 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107046.048:4723): pid=32628 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63706D616266776D6E77787070696362786E62626C776568746370697A6B6674203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107046.049:4724): pid=32628 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107046.052:4725): pid=32628 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107046.225:4726): pid=32628 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107046.226:4727): pid=32628 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107046.228:4728): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107046.229:4729): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107046.288:4730): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107046.288:4731): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107046.340:4732): pid=32644 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107046.340:4733): pid=32644 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A6478617A626A67676F626C616F7377696F62726C79707779766D61656977203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107046.341:4734): pid=32644 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107046.344:4735): pid=32644 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107046.529:4736): pid=32644 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107046.529:4737): pid=32644 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107046.533:4738): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107046.533:4739): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107046.644:4740): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107046.645:4741): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107046.704:4742): pid=32660 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107046.704:4743): pid=32660 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6572627667656D7669646E7762647062617569716772746D74776768697377203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107046.705:4744): pid=32660 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107046.707:4745): pid=32660 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107046.885:4746): pid=32660 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107046.886:4747): pid=32660 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107046.889:4748): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107046.890:4749): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107046.949:4750): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107046.949:4751): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107047.009:4752): pid=32676 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107047.009:4753): pid=32676 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67617A756B686C6367746F61726C63706F6F756E7A6C70786763646F657A796A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107047.010:4754): pid=32676 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107047.012:4755): pid=32676 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107047.191:4756): pid=32676 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107047.191:4757): pid=32676 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107047.195:4758): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107047.195:4759): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107047.253:4760): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107047.253:4761): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107047.309:4762): pid=32692 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107047.309:4763): pid=32692 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766470676F6C6B6177736F6867746C6367686167706379766E65716C6976776D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107047.309:4764): pid=32692 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107047.311:4765): pid=32692 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107047.534:4766): pid=32692 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107047.534:4767): pid=32692 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107047.538:4768): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107047.538:4769): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107047.655:4770): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107047.655:4771): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107047.710:4772): pid=32708 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107047.710:4773): pid=32708 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73676D6C6767727377756E726C7466756173676263666A636C6A78696E6D6D66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107047.710:4774): pid=32708 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107047.713:4775): pid=32708 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107047.864:4776): pid=32708 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107047.865:4777): pid=32708 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107047.868:4778): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107047.868:4779): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107047.941:4780): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107047.941:4781): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107048.001:4782): pid=32724 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107048.001:4783): pid=32724 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6768676A7776736C6A6A6B6366796D776A676B707966647979696E6A767A65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107048.001:4784): pid=32724 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107048.003:4785): pid=32724 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107048.172:4786): pid=32724 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107048.173:4787): pid=32724 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107048.177:4788): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107048.177:4789): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107048.270:4790): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107048.270:4791): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107048.326:4792): pid=32740 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107048.326:4793): pid=32740 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716F7A7972777572746E6B6274627A78706F766D6D706B6976636965676B6271203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107048.327:4794): pid=32740 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107048.329:4795): pid=32740 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107048.509:4796): pid=32740 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107048.509:4797): pid=32740 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107048.512:4798): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107048.512:4799): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107048.549:4800): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107048.549:4801): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107048.606:4802): pid=32756 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107048.607:4803): pid=32756 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73776A666F73766C71766C6E6B696E65626A78716C7061746E6A7675726D6765203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107048.607:4804): pid=32756 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107048.610:4805): pid=32756 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107048.833:4806): pid=32756 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107048.833:4807): pid=32756 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107048.837:4808): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107048.837:4809): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107048.887:4810): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107048.887:4811): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107048.944:4812): pid=32772 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107048.944:4813): pid=32772 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716F636F7164717171657366767469686F6C786D7A76767171656A736B716D66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107048.944:4814): pid=32772 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107048.946:4815): pid=32772 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107049.109:4816): pid=32772 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107049.109:4817): pid=32772 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107049.113:4818): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107049.113:4819): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107049.163:4820): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107049.163:4821): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107049.220:4822): pid=32788 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107049.220:4823): pid=32788 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767865636B7171697666647A6F7161777878746B67657467676B706E75716272203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107049.221:4824): pid=32788 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107049.223:4825): pid=32788 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107049.409:4826): pid=32788 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107049.409:4827): pid=32788 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107049.413:4828): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107049.413:4829): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107049.465:4830): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107049.465:4831): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107049.504:4832): pid=32804 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107049.505:4833): pid=32804 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786377736E77636A776B70767A6A7367627861796269687664727968776A6F61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107049.505:4834): pid=32804 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107049.506:4835): pid=32804 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107049.664:4836): pid=32804 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107049.665:4837): pid=32804 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107049.667:4838): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107049.667:4839): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107049.742:4840): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107049.742:4841): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107049.772:4842): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107049.772:4843): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107049.789:4844): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107049.789:4845): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107049.823:4846): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107049.825:4847): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107049.841:4848): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107049.841:4849): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107049.893:4850): pid=32852 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107049.894:4851): pid=32852 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6477706E766A726971636872736567797571636972777175687A62776D756F72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107049.894:4852): pid=32852 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107049.897:4853): pid=32852 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107050.071:4854): pid=32852 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107050.071:4855): pid=32852 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107050.074:4856): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107050.074:4857): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107050.101:4858): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107050.101:4859): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107050.126:4860): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107050.126:4861): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107050.150:4862): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107050.150:4863): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107050.176:4864): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107050.176:4865): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107050.221:4866): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107050.221:4867): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107050.276:4868): pid=32895 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107050.276:4869): pid=32895 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646F686A786A666776757A63757669656D70767971736779726B796D6B706770203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107050.278:4870): pid=32895 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107050.280:4871): pid=32895 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107050.462:4872): pid=32895 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107050.462:4873): pid=32895 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107050.467:4874): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107050.467:4875): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107050.481:4876): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107050.481:4877): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107050.508:4878): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107050.508:4879): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107050.582:4880): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107050.582:4881): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107050.649:4882): pid=32925 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107050.649:4883): pid=32925 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D676277756C6E686E74707A6F64796D7A736D6B6E706A6473686572756C6473203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107050.649:4884): pid=32925 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107050.652:4885): pid=32925 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107050.912:4886): pid=32925 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107050.912:4887): pid=32925 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107050.916:4888): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107050.916:4889): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107051.655:4890): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107051.655:4891): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107051.712:4892): pid=32942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107051.712:4893): pid=32942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617A627A7574746A756A65656D6B6667696B6A6F617675667476697965776864203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107051.713:4894): pid=32942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107051.716:4895): pid=32942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107051.880:4896): pid=32942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107051.880:4897): pid=32942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107051.884:4898): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107051.884:4899): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107052.159:4900): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107052.159:4901): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107052.219:4902): pid=32958 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107052.219:4903): pid=32958 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6C776676686F75756C6A75617269796668636C6677716F6A63796577797569203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107052.219:4904): pid=32958 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107052.222:4905): pid=32958 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107052.407:4906): pid=32958 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107052.407:4907): pid=32958 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107052.410:4908): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107052.410:4909): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107052.534:4910): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107052.534:4911): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107052.592:4912): pid=32974 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107052.593:4913): pid=32974 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676872646963766167736176696C75627A716D74787A627A65696F6C67796D6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107052.593:4914): pid=32974 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107052.596:4915): pid=32974 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107052.772:4916): pid=32974 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107052.772:4917): pid=32974 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107052.776:4918): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107052.776:4919): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107052.844:4920): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107052.844:4921): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107052.904:4922): pid=32990 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107052.904:4923): pid=32990 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6E68626B71717A7A6A63656C6B6A6D767261627574626E7778797579727079203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107052.905:4924): pid=32990 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107052.907:4925): pid=32990 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107053.092:4926): pid=32990 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107053.093:4927): pid=32990 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107053.096:4928): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107053.096:4929): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107053.162:4930): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107053.162:4931): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107053.219:4932): pid=33006 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107053.219:4933): pid=33006 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64697472696A6974757975716C74646F71636A737175786F637A77666E706A78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107053.220:4934): pid=33006 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107053.223:4935): pid=33006 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107053.396:4936): pid=33006 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107053.397:4937): pid=33006 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107053.401:4938): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107053.401:4939): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107053.470:4940): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107053.471:4941): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107053.533:4942): pid=33022 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107053.533:4943): pid=33022 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64756E69726F6A6F6165616365646A746374736777616371766A677661626975203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107053.533:4944): pid=33022 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107053.536:4945): pid=33022 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107053.716:4946): pid=33022 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107053.716:4947): pid=33022 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107053.720:4948): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107053.720:4949): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107053.791:4950): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107053.791:4951): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107053.853:4952): pid=33038 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107053.853:4953): pid=33038 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7866746C6F6B796F63626E716B637075786D757A6C6F676D65786A7778686171203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107053.854:4954): pid=33038 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107053.857:4955): pid=33038 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107054.001:4956): pid=33038 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107054.002:4957): pid=33038 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107054.006:4958): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107054.006:4959): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107054.082:4960): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107054.082:4961): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107054.149:4962): pid=33054 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107054.149:4963): pid=33054 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7275797A787A6C747579676F67796E7264737068786171626A71616F756278203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107054.149:4964): pid=33054 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107054.151:4965): pid=33054 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107054.303:4966): pid=33054 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107054.303:4967): pid=33054 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107054.307:4968): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107054.307:4969): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107054.375:4970): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107054.375:4971): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107054.429:4972): pid=33070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107054.429:4973): pid=33070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A716A796F796B74746977646D746C706D6E6C636C64657869717A757A6F6E7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107054.429:4974): pid=33070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107054.431:4975): pid=33070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107054.577:4976): pid=33070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107054.577:4977): pid=33070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107054.581:4978): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107054.581:4979): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107054.655:4980): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107054.655:4981): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107054.707:4982): pid=33086 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107054.707:4983): pid=33086 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616F6D6E6B71686A706B7272786B6B6F736462636C75616A7379636C69787663203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107054.708:4984): pid=33086 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107054.710:4985): pid=33086 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107054.895:4986): pid=33086 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107054.895:4987): pid=33086 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107054.899:4988): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107054.899:4989): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107055.102:4990): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107055.102:4991): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107055.155:4992): pid=33102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107055.155:4993): pid=33102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6D6D6C7474636F716A697177626876697771626C677364757A647977656C73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107055.156:4994): pid=33102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107055.158:4995): pid=33102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=ADD_GROUP msg=audit(1770107055.362:4996): pid=33105 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-group id=107 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="qemu" type=GRP_MGMT msg=audit(1770107055.366:4997): pid=33105 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=107 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="qemu" type=USER_END msg=audit(1770107055.419:4998): pid=33102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107055.419:4999): pid=33102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107055.423:5000): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107055.423:5001): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107055.654:5002): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107055.654:5003): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107055.716:5004): pid=33124 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107055.716:5005): pid=33124 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666A7A7862646A796E737A766177676762786E6F70697A65756E6B626C67796B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107055.717:5006): pid=33124 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107055.719:5007): pid=33124 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=ADD_USER msg=audit(1770107055.924:5008): pid=33128 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user acct="qemu" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MGMT msg=audit(1770107055.970:5009): pid=33128 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-home-dir id=107 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="qemu" type=USER_END msg=audit(1770107056.000:5010): pid=33124 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107056.001:5011): pid=33124 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107056.004:5012): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107056.004:5013): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107056.090:5014): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107056.090:5015): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107056.145:5016): pid=33148 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107056.146:5017): pid=33148 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70777A7065646172717A717262686D62787271767A757370656C6F7A78646362203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107056.146:5018): pid=33148 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107056.148:5019): pid=33148 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107056.339:5020): pid=33148 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107056.340:5021): pid=33148 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107056.343:5022): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107056.343:5023): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107056.423:5024): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107056.423:5025): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107056.480:5026): pid=33164 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107056.480:5027): pid=33164 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766C6D636C6B6C686D75656B61677777716C787662636B72687575627967736B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107056.481:5028): pid=33164 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107056.483:5029): pid=33164 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107056.662:5030): pid=33164 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107056.662:5031): pid=33164 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107056.664:5032): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107056.664:5033): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107056.815:5034): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107056.815:5035): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107056.846:5036): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107056.846:5037): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107056.863:5038): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107056.863:5039): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107056.895:5040): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107056.895:5041): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107056.916:5042): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107056.916:5043): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107056.972:5044): pid=33213 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107056.972:5045): pid=33213 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746A6A717977696A677A75706A616F6B677768736362736868636A6673766468203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107056.973:5046): pid=33213 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107056.975:5047): pid=33213 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107057.160:5048): pid=33213 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107057.160:5049): pid=33213 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107057.163:5050): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107057.163:5051): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107057.189:5052): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107057.189:5053): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107057.220:5054): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107057.220:5055): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107057.239:5056): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107057.239:5057): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107057.269:5058): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107057.269:5059): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107057.291:5060): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107057.291:5061): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107057.348:5062): pid=33256 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107057.348:5063): pid=33256 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617463646471796168647365786A6F6567796B6A63766A7677626D7577666D61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107057.349:5064): pid=33256 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107057.353:5065): pid=33256 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107057.519:5066): pid=33256 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107057.519:5067): pid=33256 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107057.523:5068): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107057.523:5069): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107057.543:5070): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107057.543:5071): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107057.572:5072): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107057.572:5073): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107057.676:5074): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107057.676:5075): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107057.715:5076): pid=33286 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107057.715:5077): pid=33286 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A6169777170796B676F63646A78766E637975746A686E667A786862647A70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107057.715:5078): pid=33286 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107057.718:5079): pid=33286 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770107058.040:5080): bool=os_enable_vtpm val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=SYSCALL msg=audit(1770107058.040:5080): arch=c000003e syscall=1 success=yes exit=2 a0=5 a1=7ffdab9da15e a2=2 a3=0 items=0 ppid=33286 pid=33288 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="python3" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107058.040:5080): proctitle="/usr/bin/python3" type=USER_END msg=audit(1770107058.551:5081): pid=33286 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107058.551:5082): pid=33286 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107058.557:5083): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107058.557:5084): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107058.618:5085): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107058.618:5086): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107058.687:5087): pid=33307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107058.688:5088): pid=33307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677569626A716470696E62696C766A7464756E7A746E6D707965637263636378203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107058.689:5089): pid=33307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107058.696:5090): pid=33307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107058.886:5091): pid=33307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107058.886:5092): pid=33307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107058.890:5093): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107058.890:5094): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107059.005:5095): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107059.005:5096): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107059.057:5097): pid=33323 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107059.057:5098): pid=33323 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6966776D7A6962726A76617466746E787A627966736261786177667063646574203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107059.058:5099): pid=33323 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107059.061:5100): pid=33323 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107059.238:5101): pid=33323 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107059.238:5102): pid=33323 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107059.243:5103): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107059.243:5104): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107059.354:5105): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107059.354:5106): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107059.419:5107): pid=33339 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107059.419:5108): pid=33339 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6462726F7179716D6D766D73697170766C78786561676176647072786E7374203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107059.419:5109): pid=33339 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107059.421:5110): pid=33339 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=MAC_CONFIG_CHANGE msg=audit(1770107059.747:5111): bool=logrotate_read_inside_containers val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin" type=SYSCALL msg=audit(1770107059.747:5111): arch=c000003e syscall=1 success=yes exit=2 a0=5 a1=7ffd51fe57be a2=2 a3=0 items=0 ppid=33339 pid=33341 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="python3" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107059.747:5111): proctitle="/usr/bin/python3" type=USER_END msg=audit(1770107060.252:5112): pid=33339 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107060.253:5113): pid=33339 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107060.258:5114): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107060.259:5115): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107060.368:5116): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107060.369:5117): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107060.445:5118): pid=33359 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107060.445:5119): pid=33359 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6471796C7072646764626F7076746B756668796A6B7A696F77737368726D72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107060.446:5120): pid=33359 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107060.452:5121): pid=33359 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107060.641:5122): pid=33359 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107060.641:5123): pid=33359 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107060.644:5124): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107060.645:5125): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107060.680:5126): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107060.681:5127): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107060.731:5128): pid=33375 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107060.732:5129): pid=33375 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7066716467776B6E776F7269737A717A74766578786A716F667A6A6F6A6A6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107060.732:5130): pid=33375 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107060.733:5131): pid=33375 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107060.908:5132): pid=33375 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107060.908:5133): pid=33375 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107060.912:5134): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107060.912:5135): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107061.017:5136): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107061.017:5137): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107061.069:5138): pid=33391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107061.069:5139): pid=33391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736A786B6B68667061726677726E656F6F757174766D6B707A6A676678627776203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107061.070:5140): pid=33391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107061.072:5141): pid=33391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107061.251:5142): pid=33391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107061.251:5143): pid=33391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107061.253:5144): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107061.254:5145): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107061.310:5146): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107061.310:5147): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107061.351:5148): pid=33407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107061.351:5149): pid=33407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F68636C646F76737A6D616273716576657A72676B6A69677A77766476766575203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107061.352:5150): pid=33407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107061.353:5151): pid=33407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107061.513:5152): pid=33407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107061.514:5153): pid=33407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107061.516:5154): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107061.516:5155): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107061.603:5156): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107061.603:5157): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107061.624:5158): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107061.624:5159): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107061.643:5160): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107061.643:5161): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107061.670:5162): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107061.670:5163): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107061.692:5164): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107061.692:5165): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107061.735:5166): pid=33455 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107061.736:5167): pid=33455 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746C666C7865737A666561617A647473686576676D706C6F7478736C68627064203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107061.736:5168): pid=33455 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107061.739:5169): pid=33455 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107061.899:5170): pid=33455 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107061.900:5171): pid=33455 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107061.903:5172): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107061.904:5173): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107061.930:5174): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107061.930:5175): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107061.966:5176): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107061.966:5177): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107061.987:5178): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107061.987:5179): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107062.015:5180): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107062.015:5181): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107062.037:5182): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107062.037:5183): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107062.094:5184): pid=33498 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107062.094:5185): pid=33498 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72716D78776B67746F797A686266616F71616971646E7978696674786363676F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107062.095:5186): pid=33498 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107062.098:5187): pid=33498 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107062.287:5188): pid=33498 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107062.287:5189): pid=33498 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107062.290:5190): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107062.290:5191): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107062.308:5192): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107062.308:5193): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107062.330:5194): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107062.330:5195): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107062.417:5196): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107062.417:5197): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107062.439:5198): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107062.439:5199): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107062.460:5200): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107062.460:5201): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107062.487:5202): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107062.488:5203): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107062.512:5204): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107062.513:5205): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107062.555:5206): pid=33560 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107062.555:5207): pid=33560 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6865686664746E7475666E676172786D7862777270746B6578696E7775646F68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107062.556:5208): pid=33560 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107062.558:5209): pid=33560 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107062.733:5210): pid=33560 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107062.734:5211): pid=33560 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107062.738:5212): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107062.738:5213): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107062.763:5214): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107062.763:5215): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107062.797:5216): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107062.797:5217): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107062.818:5218): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107062.818:5219): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107062.862:5220): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107062.863:5221): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107062.882:5222): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107062.882:5223): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107062.932:5224): pid=33603 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107062.932:5225): pid=33603 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73697262697877637A747567676C6B756976797370786F6672716F7474686766203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107062.933:5226): pid=33603 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107062.935:5227): pid=33603 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107063.078:5228): pid=33603 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107063.078:5229): pid=33603 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107063.081:5230): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107063.082:5231): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107063.104:5232): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107063.104:5233): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107063.133:5234): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107063.133:5235): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107063.234:5236): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107063.234:5237): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107063.292:5238): pid=33633 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107063.292:5239): pid=33633 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666C686672697568697A6A6D74756F7966656C78756A767872756C74656E7766203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107063.293:5240): pid=33633 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107063.296:5241): pid=33633 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107063.860:5242): prog-id=138 op=LOAD type=BPF msg=audit(1770107063.860:5243): prog-id=139 op=LOAD type=BPF msg=audit(1770107063.860:5244): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107063.860:5245): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107063.860:5246): prog-id=140 op=LOAD type=BPF msg=audit(1770107063.860:5247): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107063.863:5248): prog-id=141 op=LOAD type=BPF msg=audit(1770107063.863:5249): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107063.865:5250): prog-id=142 op=LOAD type=BPF msg=audit(1770107063.865:5251): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107063.865:5252): prog-id=143 op=LOAD type=BPF msg=audit(1770107063.865:5253): prog-id=144 op=LOAD type=BPF msg=audit(1770107063.865:5254): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107063.865:5255): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107063.866:5256): prog-id=145 op=LOAD type=BPF msg=audit(1770107063.866:5257): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107063.866:5258): prog-id=146 op=LOAD type=BPF msg=audit(1770107063.866:5259): prog-id=147 op=LOAD type=BPF msg=audit(1770107063.866:5260): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107063.866:5261): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107063.897:5262): pid=33633 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107063.897:5263): pid=33633 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107063.902:5264): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107063.902:5265): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107063.996:5266): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107063.996:5267): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107064.064:5268): pid=33687 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107064.064:5269): pid=33687 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6662646B696576676871777A72676267686A786263657574666C6468627264203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107064.067:5270): pid=33687 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107064.071:5271): pid=33687 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107064.263:5272): pid=33687 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107064.264:5273): pid=33687 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107064.268:5274): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107064.268:5275): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107064.352:5276): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107064.352:5277): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107064.418:5278): pid=33703 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107064.418:5279): pid=33703 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73666D61706C6171686561657878696F70636979617479636A72716E6667777A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107064.419:5280): pid=33703 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107064.422:5281): pid=33703 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107064.609:5282): pid=33703 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107064.610:5283): pid=33703 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107064.614:5284): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107064.614:5285): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107064.700:5286): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107064.700:5287): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107064.762:5288): pid=33720 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107064.763:5289): pid=33720 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73776D667967617165616E68737265616E6B7075726E656D7165616168746165203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107064.763:5290): pid=33720 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107064.766:5291): pid=33720 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107064.958:5292): pid=33720 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107064.958:5293): pid=33720 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107064.963:5294): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107064.963:5295): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107065.041:5296): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107065.042:5297): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107065.103:5298): pid=33737 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107065.104:5299): pid=33737 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677078657771697A7268746E6171776E6B6966746D78696470626C7069626E6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107065.104:5300): pid=33737 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107065.107:5301): pid=33737 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107065.296:5302): pid=33737 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107065.297:5303): pid=33737 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107065.301:5304): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107065.301:5305): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107065.431:5306): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107065.431:5307): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107065.493:5308): pid=33753 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107065.493:5309): pid=33753 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746C736578726C796C6E777A7A79636A777A77757274707162616C73736E6C70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107065.494:5310): pid=33753 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107065.496:5311): pid=33753 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107065.670:5312): pid=33753 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107065.670:5313): pid=33753 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107065.675:5314): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107065.675:5315): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107065.759:5316): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107065.759:5317): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107065.791:5318): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107065.791:5319): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107065.812:5320): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107065.812:5321): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107065.854:5322): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107065.854:5323): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107065.877:5324): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107065.878:5325): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107065.945:5326): pid=33801 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107065.945:5327): pid=33801 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716E776776637265696C7463667A6868736478787578636662626B6A7278746E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107065.946:5328): pid=33801 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107065.950:5329): pid=33801 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107066.117:5330): pid=33801 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107066.117:5331): pid=33801 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107066.121:5332): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107066.122:5333): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107066.148:5334): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107066.148:5335): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107066.187:5336): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107066.187:5337): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107066.209:5338): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107066.209:5339): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107066.243:5340): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107066.243:5341): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107066.265:5342): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107066.265:5343): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107066.323:5344): pid=33844 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107066.323:5345): pid=33844 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677A72696A61706E7A7579706F6C6C776B72676C6D616973766E6D6465667578203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107066.324:5346): pid=33844 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107066.327:5347): pid=33844 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107066.501:5348): pid=33844 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107066.501:5349): pid=33844 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107066.506:5350): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107066.506:5351): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107066.522:5352): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107066.522:5353): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107066.556:5354): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107066.556:5355): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107066.828:5356): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107066.828:5357): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107066.891:5358): pid=33874 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107066.891:5359): pid=33874 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646171666E7161686C63796965706D6769716963686D61677A79786371627A6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107066.892:5360): pid=33874 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107066.894:5361): pid=33874 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107067.069:5362): pid=33874 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107067.070:5363): pid=33874 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107067.073:5364): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107067.073:5365): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107067.162:5366): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107067.162:5367): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107067.227:5368): pid=33890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107067.227:5369): pid=33890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7A626B65636276636766706274716A6978766873707374626F6773616E616F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107067.228:5370): pid=33890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107067.229:5371): pid=33890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107067.378:5372): pid=33890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107067.378:5373): pid=33890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107067.382:5374): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107067.382:5375): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107067.466:5376): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107067.466:5377): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107067.525:5378): pid=33906 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107067.525:5379): pid=33906 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77716D6F7175726D7A6F6A6C7A6D64647A6B716D7470706868736C66616A6E7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107067.526:5380): pid=33906 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107067.528:5381): pid=33906 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107067.821:5382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107067.828:5383): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107067.830:5384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107067.830:5385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107067.832:5386): prog-id=148 op=LOAD type=BPF msg=audit(1770107067.832:5387): prog-id=149 op=LOAD type=BPF msg=audit(1770107067.832:5388): prog-id=150 op=LOAD type=BPF msg=audit(1770107067.832:5389): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107067.832:5390): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107067.883:5391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107067.910:5392): pid=33906 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107067.910:5393): pid=33906 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107067.915:5394): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107067.915:5395): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107068.195:5396): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107068.195:5397): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107068.257:5398): pid=33930 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107068.257:5399): pid=33930 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767763676B756F716175766E73746F6972636B676C78786A7972617064726468203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107068.258:5400): pid=33930 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107068.262:5401): pid=33930 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=MAC_POLICY_LOAD msg=audit(1770107069.228:5402): auid=1002 ses=13 lsm=selinux res=1AUID="tripleo-admin" type=SYSCALL msg=audit(1770107069.228:5402): arch=c000003e syscall=1 success=yes exit=3546155 a0=4 a1=7f9d43200000 a2=361c2b a3=0 items=0 ppid=33932 pid=33937 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107069.228:5402): proctitle="/sbin/load_policy" type=USER_MAC_CONFIG_CHANGE msg=audit(1770107069.383:5403): pid=33932 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=modify tglob="/var/lib/rabbitmq(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770107069.439:5404): pid=33930 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107069.439:5405): pid=33930 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107069.445:5406): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107069.445:5407): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107069.511:5408): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107069.511:5409): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107069.569:5410): pid=33951 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107069.569:5411): pid=33951 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6D666F6B62696D77766E69626674666170746E65666E7976676A7069626961203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107069.571:5412): pid=33951 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107069.577:5413): pid=33951 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107069.766:5414): pid=33951 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107069.766:5415): pid=33951 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107069.770:5416): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107069.770:5417): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107069.826:5418): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107069.826:5419): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107069.884:5420): pid=33967 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107069.884:5421): pid=33967 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747861616169637271776A6A74627A7068626C6977687A7868797266646A766D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107069.885:5422): pid=33967 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107069.888:5423): pid=33967 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107070.075:5424): pid=33967 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107070.075:5425): pid=33967 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107070.079:5426): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107070.079:5427): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107070.174:5428): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107070.174:5429): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107070.238:5430): pid=33983 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107070.238:5431): pid=33983 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716465626779786E7371766B77736A627570647264747169687A777073667469203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107070.238:5432): pid=33983 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107070.241:5433): pid=33983 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107070.508:5434): pid=33983 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107070.509:5435): pid=33983 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107070.513:5436): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107070.513:5437): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107071.039:5438): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107071.039:5439): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107071.099:5440): pid=34001 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107071.099:5441): pid=34001 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7974646E736D62757672736D737A7462627563776B716A7479636D6A78696A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107071.099:5442): pid=34001 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107071.102:5443): pid=34001 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107074.006:5444): pid=34001 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107074.006:5445): pid=34001 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107074.010:5446): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107074.011:5447): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107074.115:5448): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107074.115:5449): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107074.168:5450): pid=34018 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107074.168:5451): pid=34018 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656161626E6F74696C68657876616470677A69627069626B697361727A656D68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107074.169:5452): pid=34018 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107074.172:5453): pid=34018 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107074.662:5454): pid=34018 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107074.663:5455): pid=34018 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107074.667:5456): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107074.667:5457): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107074.885:5458): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107074.885:5459): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107074.944:5460): pid=34079 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107074.944:5461): pid=34079 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65766B7A6C74736C7478636E63786D7761766E74677874756563787368677968203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107074.945:5462): pid=34079 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107074.948:5463): pid=34079 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107075.121:5464): pid=34079 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107075.122:5465): pid=34079 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107075.126:5466): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107075.126:5467): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107075.236:5468): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107075.236:5469): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107075.283:5470): pid=34095 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107075.284:5471): pid=34095 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6177636A686661686D686269716A69796A77677869736C786263697A6E64746F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107075.285:5472): pid=34095 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107075.287:5473): pid=34095 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107075.484:5474): pid=34095 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107075.484:5475): pid=34095 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107075.488:5476): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107075.488:5477): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107075.585:5478): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107075.585:5479): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107075.619:5480): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107075.619:5481): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107075.640:5482): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107075.640:5483): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107075.684:5484): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107075.684:5485): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107075.787:5486): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107075.788:5487): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107075.853:5488): pid=34154 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107075.854:5489): pid=34154 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656F62786E747665656179667A777865646A64726163667578726267716C6D6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107075.855:5490): pid=34154 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107075.857:5491): pid=34154 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107076.023:5492): pid=34154 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107076.024:5493): pid=34154 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107076.027:5494): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107076.027:5495): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107076.054:5496): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107076.054:5497): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107076.093:5498): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107076.093:5499): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107076.113:5500): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107076.113:5501): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107076.147:5502): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107076.147:5503): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107076.168:5504): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107076.168:5505): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107076.234:5506): pid=34197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107076.234:5507): pid=34197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6861616C617676687A6F6F787A6D7A6A7A6879776B6370717264656275716B74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107076.235:5508): pid=34197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107076.238:5509): pid=34197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107076.429:5510): pid=34197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107076.429:5511): pid=34197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107076.433:5512): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107076.433:5513): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107076.453:5514): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107076.453:5515): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107076.484:5516): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107076.484:5517): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107076.568:5518): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107076.568:5519): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107076.593:5520): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107076.593:5521): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107076.615:5522): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107076.615:5523): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107076.642:5524): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107076.642:5525): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107076.759:5526): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107076.759:5527): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107076.825:5528): pid=34259 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107076.826:5529): pid=34259 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787765676C6468686D6F7466727162707667767462726D6275627278676E666D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107076.826:5530): pid=34259 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107076.829:5531): pid=34259 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107077.021:5532): pid=34259 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107077.021:5533): pid=34259 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107077.025:5534): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107077.025:5535): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107077.051:5536): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107077.051:5537): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107077.089:5538): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107077.089:5539): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107077.108:5540): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107077.108:5541): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107077.133:5542): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107077.133:5543): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107077.154:5544): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107077.154:5545): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107077.206:5546): pid=34304 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107077.206:5547): pid=34304 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73636D7A6F7877707975786B676B74746F637A7A66677679647065766D7A7474203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107077.207:5548): pid=34304 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107077.210:5549): pid=34304 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107077.376:5550): pid=34304 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107077.377:5551): pid=34304 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107077.381:5552): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107077.381:5553): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107077.401:5554): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107077.401:5555): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107077.431:5556): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107077.431:5557): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107077.534:5558): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107077.534:5559): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107077.606:5560): pid=34334 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107077.606:5561): pid=34334 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65756D68736D6C756D796765747A72626375646279667166626A7A6E78776271203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107077.607:5562): pid=34334 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107077.610:5563): pid=34334 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107077.798:5564): pid=34334 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107077.798:5565): pid=34334 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107077.802:5566): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107077.802:5567): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107077.838:5568): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107077.838:5569): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107077.893:5570): pid=34350 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107077.893:5571): pid=34350 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636D756B716568736B7A6E616276647970666B7562677A6D68766D666A74757A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107077.894:5572): pid=34350 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107077.897:5573): pid=34350 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107078.054:5574): pid=34350 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107078.054:5575): pid=34350 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107078.058:5576): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107078.058:5577): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107078.103:5578): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107078.103:5579): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107078.157:5580): pid=34366 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107078.157:5581): pid=34366 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71696E7163736161667070697578756E7178716265767678646E666D69786773203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107078.158:5582): pid=34366 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107078.160:5583): pid=34366 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107078.324:5584): pid=34366 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107078.324:5585): pid=34366 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107078.328:5586): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107078.328:5587): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107078.375:5588): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107078.375:5589): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107078.433:5590): pid=34382 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107078.433:5591): pid=34382 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716366616379796D67776461687A6961726D6275786865656C6D767965747974203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107078.434:5592): pid=34382 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107078.436:5593): pid=34382 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107078.604:5594): pid=34382 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107078.605:5595): pid=34382 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107078.608:5596): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107078.608:5597): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107078.884:5598): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107078.884:5599): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107078.914:5600): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107078.914:5601): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107078.938:5602): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107078.938:5603): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107078.967:5604): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107078.967:5605): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107078.991:5606): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107078.991:5607): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107079.053:5608): pid=34430 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107079.053:5609): pid=34430 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7461667874677862767A676F6F6975706265636B73786A726666626668646A70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107079.053:5610): pid=34430 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107079.056:5611): pid=34430 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107079.222:5612): pid=34430 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107079.222:5613): pid=34430 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107079.227:5614): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107079.227:5615): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107079.253:5616): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107079.253:5617): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107079.287:5618): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107079.287:5619): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107079.308:5620): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107079.308:5621): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107079.338:5622): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107079.338:5623): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107079.357:5624): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107079.357:5625): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107079.395:5626): pid=34473 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107079.395:5627): pid=34473 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646A77636B6A796D746D6F74676A616A736370776C7A6A626A70696C7A6B6A68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107079.396:5628): pid=34473 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107079.397:5629): pid=34473 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107079.560:5630): pid=34473 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107079.560:5631): pid=34473 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107079.563:5632): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107079.563:5633): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107079.581:5634): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107079.581:5635): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107079.608:5636): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107079.608:5637): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107079.683:5638): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107079.683:5639): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107079.728:5640): pid=34503 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107079.728:5641): pid=34503 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D736C646279737764797771776B6A7A727862757A6773666466777674786A63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107079.729:5642): pid=34503 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107079.731:5643): pid=34503 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107079.923:5644): pid=34503 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107079.924:5645): pid=34503 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107079.927:5646): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107079.927:5647): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107080.006:5648): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107080.006:5649): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107080.063:5650): pid=34519 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107080.063:5651): pid=34519 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677768686D756B6571656A75716F6D6E796670746C666A626A626466676A636B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107080.064:5652): pid=34519 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107080.065:5653): pid=34519 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107080.245:5654): pid=34519 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107080.245:5655): pid=34519 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107080.248:5656): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107080.248:5657): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107080.624:5658): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107080.624:5659): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107080.678:5660): pid=34535 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107080.678:5661): pid=34535 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78717A7A776B6A6679626F72616F6570706D6D7478616B68696A717174687270203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107080.679:5662): pid=34535 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107080.681:5663): pid=34535 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107083.604:5664): pid=34535 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107083.604:5665): pid=34535 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107083.608:5666): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107083.608:5667): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107084.033:5668): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107084.033:5669): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107084.060:5670): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107084.060:5671): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107084.081:5672): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107084.081:5673): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107084.110:5674): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107084.110:5675): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107084.187:5676): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107084.187:5677): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107084.236:5678): pid=34584 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107084.237:5679): pid=34584 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6179797961767A67706B6B6773666777747A7678676B627574797676776E6F65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107084.237:5680): pid=34584 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107084.240:5681): pid=34584 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107084.432:5682): pid=34584 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107084.432:5683): pid=34584 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107084.435:5684): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107084.436:5685): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107084.465:5686): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107084.465:5687): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107084.493:5688): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107084.493:5689): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107084.514:5690): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107084.514:5691): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107084.541:5692): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107084.541:5693): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107084.562:5694): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107084.562:5695): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107084.612:5696): pid=34629 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107084.612:5697): pid=34629 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756765736E74726E666F6C746E63646676647A757767797062666E736470776A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107084.613:5698): pid=34629 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107084.615:5699): pid=34629 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107084.802:5700): pid=34629 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107084.803:5701): pid=34629 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107084.806:5702): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107084.806:5703): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107084.826:5704): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107084.826:5705): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107084.847:5706): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107084.847:5707): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107084.928:5708): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107084.928:5709): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107084.978:5710): pid=34660 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107084.978:5711): pid=34660 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7767686E69726D7A6877616A71636461657375716F77797279797A6472766B6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107084.979:5712): pid=34660 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107084.982:5713): pid=34660 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107085.272:5714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107085.298:5715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107085.321:5716): pid=34660 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107085.321:5717): pid=34660 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107085.325:5718): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107085.325:5719): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107085.416:5720): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107085.416:5721): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107085.477:5722): pid=34680 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107085.477:5723): pid=34680 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667167736D6D6B63796D6276666268776175756A68636D657561706177787177203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107085.477:5724): pid=34680 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107085.479:5725): pid=34680 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107085.680:5726): pid=34680 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107085.680:5727): pid=34680 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107085.682:5728): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107085.683:5729): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107086.168:5730): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107086.168:5731): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107086.215:5732): pid=34698 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107086.215:5733): pid=34698 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76677A68786F7875776461677964656A70776A7678656C67696D64636C667971203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107086.216:5734): pid=34698 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107086.219:5735): pid=34698 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107086.393:5736): pid=34698 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107086.393:5737): pid=34698 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107086.395:5738): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107086.396:5739): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107086.532:5740): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107086.533:5741): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107086.628:5742): pid=34716 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107086.628:5743): pid=34716 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687A6A6179796E6B6F79716F626D686E6C6E67786276756F6663786773766E68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107086.629:5744): pid=34716 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107086.631:5745): pid=34716 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107089.451:5746): pid=34716 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107089.451:5747): pid=34716 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107089.455:5748): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107089.455:5749): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107089.712:5750): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107089.712:5751): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107089.738:5752): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107089.738:5753): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107089.750:5754): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107089.750:5755): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107089.782:5756): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107089.782:5757): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107089.891:5758): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107089.892:5759): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107089.950:5760): pid=34765 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107089.951:5761): pid=34765 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756E6A63736466736E73726F757165686C706262706F77616C6D67626E70746A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107089.951:5762): pid=34765 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107089.954:5763): pid=34765 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107090.147:5764): pid=34765 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107090.148:5765): pid=34765 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107090.152:5766): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107090.152:5767): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107090.178:5768): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107090.178:5769): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107090.212:5770): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107090.212:5771): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107090.231:5772): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107090.231:5773): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107090.262:5774): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107090.263:5775): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107090.281:5776): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107090.281:5777): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107090.344:5778): pid=34810 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107090.345:5779): pid=34810 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B726D676771646E76747A6B716E73656E6A777069657063737470646963736A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107090.346:5780): pid=34810 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107090.349:5781): pid=34810 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107090.523:5782): pid=34810 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107090.524:5783): pid=34810 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107090.527:5784): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107090.527:5785): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107090.547:5786): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107090.547:5787): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107090.579:5788): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107090.579:5789): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107090.902:5790): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107090.902:5791): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107090.960:5792): pid=34840 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107090.960:5793): pid=34840 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75717863776E756E66666670696D726672777474786761687773696272786F74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107090.961:5794): pid=34840 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107090.964:5795): pid=34840 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107091.295:5796): pid=34840 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107091.296:5797): pid=34840 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107091.300:5798): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107091.300:5799): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107091.383:5800): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107091.383:5801): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107091.443:5802): pid=34858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107091.444:5803): pid=34858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757767746369716879696A6E7078796F6C7071776E6469637076676D68696768203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107091.444:5804): pid=34858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107091.447:5805): pid=34858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107091.729:5806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107091.730:5807): prog-id=151 op=LOAD type=BPF msg=audit(1770107091.737:5808): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107091.795:5809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107091.816:5810): pid=34858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107091.816:5811): pid=34858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107091.820:5812): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107091.820:5813): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107092.026:5814): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107092.026:5815): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107092.059:5816): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107092.059:5817): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107092.082:5818): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107092.082:5819): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107092.119:5820): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107092.119:5821): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107092.145:5822): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107092.145:5823): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107092.192:5824): pid=34914 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107092.192:5825): pid=34914 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74667479736C736B747163697676647962656F73656F7972796D7A6170767A70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107092.192:5826): pid=34914 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107092.194:5827): pid=34914 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107092.347:5828): pid=34914 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107092.347:5829): pid=34914 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107092.350:5830): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107092.350:5831): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107092.376:5832): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107092.376:5833): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107092.404:5834): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107092.404:5835): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107092.424:5836): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107092.424:5837): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107092.447:5838): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107092.447:5839): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107092.470:5840): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107092.470:5841): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107092.520:5842): pid=34957 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107092.520:5843): pid=34957 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6265627562726C7A7470766C6A736A7774636272706C6F6D6667657076776C70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107092.520:5844): pid=34957 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107092.522:5845): pid=34957 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107092.704:5846): pid=34957 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107092.704:5847): pid=34957 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107092.708:5848): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107092.708:5849): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107092.730:5850): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107092.730:5851): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107092.760:5852): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107092.760:5853): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107092.827:5854): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107092.827:5855): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107092.879:5856): pid=34987 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107092.879:5857): pid=34987 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687266756573626C6A6C6C7074707A75667777646D627A6775666371646F7277203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107092.880:5858): pid=34987 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107092.882:5859): pid=34987 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107093.372:5860): prog-id=152 op=LOAD type=BPF msg=audit(1770107093.372:5861): prog-id=153 op=LOAD type=BPF msg=audit(1770107093.372:5862): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107093.372:5863): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107093.373:5864): prog-id=154 op=LOAD type=BPF msg=audit(1770107093.373:5865): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107093.375:5866): prog-id=155 op=LOAD type=BPF msg=audit(1770107093.375:5867): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107093.377:5868): prog-id=156 op=LOAD type=BPF msg=audit(1770107093.377:5869): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107093.377:5870): prog-id=157 op=LOAD type=BPF msg=audit(1770107093.377:5871): prog-id=158 op=LOAD type=BPF msg=audit(1770107093.377:5872): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107093.377:5873): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107093.378:5874): prog-id=159 op=LOAD type=BPF msg=audit(1770107093.378:5875): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107093.378:5876): prog-id=160 op=LOAD type=BPF msg=audit(1770107093.378:5877): prog-id=161 op=LOAD type=BPF msg=audit(1770107093.378:5878): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107093.378:5879): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107093.640:5880): prog-id=162 op=LOAD type=BPF msg=audit(1770107093.640:5881): prog-id=163 op=LOAD type=BPF msg=audit(1770107093.640:5882): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107093.640:5883): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107093.640:5884): prog-id=164 op=LOAD type=BPF msg=audit(1770107093.640:5885): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107093.643:5886): prog-id=165 op=LOAD type=BPF msg=audit(1770107093.643:5887): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107093.645:5888): prog-id=166 op=LOAD type=BPF msg=audit(1770107093.645:5889): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107093.645:5890): prog-id=167 op=LOAD type=BPF msg=audit(1770107093.645:5891): prog-id=168 op=LOAD type=BPF msg=audit(1770107093.645:5892): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107093.645:5893): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107093.646:5894): prog-id=169 op=LOAD type=BPF msg=audit(1770107093.646:5895): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107093.646:5896): prog-id=170 op=LOAD type=BPF msg=audit(1770107093.646:5897): prog-id=171 op=LOAD type=BPF msg=audit(1770107093.646:5898): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107093.646:5899): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107093.674:5900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chrony-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107093.675:5901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chrony-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107093.705:5902): pid=34987 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107093.705:5903): pid=34987 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107093.710:5904): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107093.710:5905): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107093.891:5906): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107093.891:5907): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107093.943:5908): pid=35079 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107093.943:5909): pid=35079 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7868626F6378626E79646B707A707473636F6D6C786A677568746E75676C79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107093.943:5910): pid=35079 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107093.947:5911): pid=35079 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107094.131:5912): pid=35079 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107094.131:5913): pid=35079 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107094.134:5914): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107094.134:5915): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107094.266:5916): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107094.266:5917): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107094.301:5918): pid=35096 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107094.301:5919): pid=35096 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75666D676662736469626161787067796B67777865747A6979626D6661696377203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107094.301:5920): pid=35096 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107094.303:5921): pid=35096 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107104.500:5922): pid=35096 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107104.501:5923): pid=35096 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107104.504:5924): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107104.504:5925): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107104.611:5926): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107104.611:5927): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107104.670:5928): pid=35113 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107104.670:5929): pid=35113 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70786562777768656D78776261727377766263696F737A796B71716469676A77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107104.671:5930): pid=35113 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107104.673:5931): pid=35113 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107104.852:5932): pid=35113 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107104.852:5933): pid=35113 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107104.856:5934): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107104.856:5935): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107104.920:5936): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107104.920:5937): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107104.976:5938): pid=35130 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107104.976:5939): pid=35130 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F78666A73677A796E6A73697370656863726F66706F6F65736D677A616F7364203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107104.977:5940): pid=35130 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107104.979:5941): pid=35130 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107105.143:5942): pid=35130 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107105.144:5943): pid=35130 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107105.147:5944): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107105.147:5945): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107105.557:5946): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107105.557:5947): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107105.603:5948): pid=35147 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107105.603:5949): pid=35147 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76677475677A727769677273726C7574657065786D686E62776573776B657462203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107105.604:5950): pid=35147 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107105.605:5951): pid=35147 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107105.794:5952): prog-id=172 op=LOAD type=BPF msg=audit(1770107105.794:5953): prog-id=173 op=LOAD type=BPF msg=audit(1770107105.794:5954): prog-id=174 op=LOAD type=SERVICE_START msg=audit(1770107105.852:5955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107105.900:5956): pid=35147 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107105.900:5957): pid=35147 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107105.904:5958): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107105.904:5959): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107106.473:5960): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107106.473:5961): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107106.534:5962): pid=35167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107106.535:5963): pid=35167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62777579776568716B63797971747471656161616670646D6168736369676275203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107106.535:5964): pid=35167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107106.539:5965): pid=35167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107106.743:5966): pid=35167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107106.743:5967): pid=35167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107106.747:5968): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107106.747:5969): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107106.936:5970): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107106.936:5971): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107106.996:5972): pid=35184 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107106.996:5973): pid=35184 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76767162746F77667878696C7A686B6672797761676E706D77726B7773617770203B20504154483D2F62696E3A2F7573722F62696E3A2F7362696E3A2F7573722F7362696E202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107106.997:5974): pid=35184 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107107.000:5975): pid=35184 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107107.165:5976): pid=35184 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107107.165:5977): pid=35184 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107107.169:5978): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107107.169:5979): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107107.511:5980): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107107.511:5981): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107107.570:5982): pid=35201 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107107.571:5983): pid=35201 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686879736B676162777261676176756277707567706D726E777671626768636A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107107.571:5984): pid=35201 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107107.575:5985): pid=35201 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107107.742:5986): pid=35201 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107107.743:5987): pid=35201 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107107.747:5988): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107107.747:5989): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107107.834:5990): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107107.834:5991): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107107.876:5992): pid=35217 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107107.877:5993): pid=35217 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726D6178646C6C6E776264696D7670696C6179676A76796C706E6B736B626277203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107107.877:5994): pid=35217 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107107.878:5995): pid=35217 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107108.039:5996): pid=35217 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107108.039:5997): pid=35217 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107108.043:5998): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107108.043:5999): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107108.577:6000): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107108.577:6001): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107108.639:6002): pid=35233 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107108.639:6003): pid=35233 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F69786E6D6265736A6F7274756C7968706B6263687075696D77706572717A6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107108.640:6004): pid=35233 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107108.642:6005): pid=35233 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107108.814:6006): pid=35233 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107108.814:6007): pid=35233 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107108.818:6008): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107108.818:6009): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107108.907:6010): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107108.907:6011): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107108.968:6012): pid=35249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107108.968:6013): pid=35249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66657A757261716B6172687972676365766D636F6872716F7164717267687867203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107108.969:6014): pid=35249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107108.972:6015): pid=35249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107109.150:6016): pid=35249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107109.150:6017): pid=35249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107109.154:6018): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107109.154:6019): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107109.235:6020): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107109.235:6021): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107109.296:6022): pid=35265 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107109.296:6023): pid=35265 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777671766C75766175736E7474766C6C776A66756E787A6873746E676C626B76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107109.297:6024): pid=35265 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107109.300:6025): pid=35265 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107109.483:6026): pid=35265 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107109.483:6027): pid=35265 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107109.488:6028): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107109.488:6029): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107109.573:6030): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107109.573:6031): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107109.638:6032): pid=35281 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107109.638:6033): pid=35281 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6B616B6E6463626C737472796F796E686A616C6B7866736974657A65697666203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107109.639:6034): pid=35281 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107109.641:6035): pid=35281 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107109.817:6036): pid=35281 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107109.817:6037): pid=35281 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107109.822:6038): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107109.822:6039): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107109.913:6040): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107109.913:6041): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107109.971:6042): pid=35297 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107109.971:6043): pid=35297 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727463656678717A67796F6470646672617678656D74687161796C657667656C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107109.972:6044): pid=35297 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107109.974:6045): pid=35297 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107110.149:6046): pid=35297 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107110.149:6047): pid=35297 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107110.153:6048): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107110.154:6049): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107110.224:6050): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107110.224:6051): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107110.288:6052): pid=35313 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107110.288:6053): pid=35313 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616F666C6A6A766E797565716B716963626172666C616F716E66767A6F6E757A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107110.289:6054): pid=35313 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107110.292:6055): pid=35313 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=MAC_POLICY_LOAD msg=audit(1770107111.204:6056): auid=1002 ses=13 lsm=selinux res=1AUID="tripleo-admin" type=SYSCALL msg=audit(1770107111.204:6056): arch=c000003e syscall=1 success=yes exit=3546155 a0=4 a1=7f5ef7400000 a2=361c2b a3=0 items=0 ppid=35315 pid=35321 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107111.204:6056): proctitle="/sbin/load_policy" type=USER_MAC_CONFIG_CHANGE msg=audit(1770107111.329:6057): pid=35315 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/container-config-scripts(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770107111.361:6058): pid=35313 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107111.361:6059): pid=35313 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107111.368:6060): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107111.368:6061): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107111.469:6062): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107111.469:6063): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107111.525:6064): pid=35335 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107111.525:6065): pid=35335 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6277677563656877696578676C6F637A6E736669737163726367746D77736B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107111.526:6066): pid=35335 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107111.534:6067): pid=35335 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107111.681:6068): pid=35335 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107111.681:6069): pid=35335 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107111.684:6070): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107111.684:6071): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107111.956:6072): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107111.956:6073): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107111.997:6074): pid=35351 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107111.997:6075): pid=35351 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616B6A79626F78686678766C6A767770736C6C7167776C73636A77786475636D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107111.997:6076): pid=35351 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107112.000:6077): pid=35351 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107112.162:6078): pid=35351 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107112.162:6079): pid=35351 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107112.165:6080): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107112.165:6081): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107112.244:6082): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107112.244:6083): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107112.265:6084): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107112.265:6085): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107112.284:6086): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107112.284:6087): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107112.307:6088): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107112.307:6089): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107112.326:6090): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107112.326:6091): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107112.358:6092): pid=35399 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107112.359:6093): pid=35399 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7769796F72756B77777A6A70736B62626E656E7764666A646C79686B737A70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107112.359:6094): pid=35399 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107112.360:6095): pid=35399 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107112.490:6096): pid=35399 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107112.491:6097): pid=35399 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107112.495:6098): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107112.495:6099): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107112.517:6100): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107112.517:6101): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107112.553:6102): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107112.553:6103): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107112.571:6104): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107112.571:6105): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107112.601:6106): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107112.601:6107): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107112.621:6108): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107112.622:6109): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107112.682:6110): pid=35442 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107112.682:6111): pid=35442 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656A6A65636B73636D63687474666D78646264676267637565626A6A71736479203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107112.683:6112): pid=35442 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107112.686:6113): pid=35442 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107112.846:6114): pid=35442 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107112.846:6115): pid=35442 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107112.849:6116): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107112.850:6117): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107112.868:6118): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107112.868:6119): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107112.901:6120): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107112.901:6121): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107113.195:6122): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107113.195:6123): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107113.257:6124): pid=35472 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107113.258:6125): pid=35472 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6D796C7861726B69756C62796B79746866696E676C7870716E726478636578203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107113.258:6126): pid=35472 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107113.261:6127): pid=35472 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107113.451:6128): pid=35472 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107113.451:6129): pid=35472 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107113.456:6130): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107113.457:6131): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107113.586:6132): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107113.587:6133): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107113.645:6134): pid=35488 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107113.655:6135): pid=35488 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6B78706C6C75747A636F68726A686F636F707071616F756171766364736566203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107113.656:6136): pid=35488 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107113.661:6137): pid=35488 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107113.848:6138): pid=35488 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107113.848:6139): pid=35488 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107113.853:6140): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107113.853:6141): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107113.934:6142): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107113.934:6143): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107113.997:6144): pid=35504 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107113.997:6145): pid=35504 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716E747566736B76786673626D757A79696A6968756568666873697871786A6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107113.998:6146): pid=35504 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107114.000:6147): pid=35504 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107114.183:6148): pid=35504 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107114.183:6149): pid=35504 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107114.187:6150): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107114.187:6151): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107114.437:6152): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107114.437:6153): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107114.500:6154): pid=35520 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107114.501:6155): pid=35520 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62646A616472756A6F62696F706E736D6179676D6A75796A6772716F67786773203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107114.501:6156): pid=35520 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107114.504:6157): pid=35520 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107114.698:6158): pid=35520 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107114.698:6159): pid=35520 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107114.702:6160): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107114.702:6161): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107116.428:6162): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107116.428:6163): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107116.456:6164): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107116.456:6165): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107116.477:6166): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107116.478:6167): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107116.508:6168): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107116.508:6169): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107116.529:6170): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107116.529:6171): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107116.584:6172): pid=35568 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107116.585:6173): pid=35568 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76666572636A6F79777176636C6B72677363656F7077747A72786F7367736673203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107116.586:6174): pid=35568 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107116.588:6175): pid=35568 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107116.752:6176): pid=35568 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107116.753:6177): pid=35568 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107116.758:6178): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107116.758:6179): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107116.783:6180): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107116.783:6181): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107116.815:6182): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107116.815:6183): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107116.837:6184): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107116.837:6185): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107116.866:6186): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107116.866:6187): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107116.890:6188): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107116.890:6189): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107116.949:6190): pid=35611 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107116.949:6191): pid=35611 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71797A79626F756F7971636F76717A6B6A696A71746D696A6A796A767578626C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107116.950:6192): pid=35611 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107116.952:6193): pid=35611 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107117.116:6194): pid=35611 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107117.117:6195): pid=35611 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107117.120:6196): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107117.120:6197): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107117.140:6198): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107117.140:6199): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107117.171:6200): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107117.171:6201): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107117.247:6202): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107117.247:6203): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107117.302:6204): pid=35641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107117.302:6205): pid=35641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D69666C646F757A71657469697A69746C6E6E786F6B676170736E7374776273203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107117.303:6206): pid=35641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107117.305:6207): pid=35641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107117.441:6208): pid=35641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107117.441:6209): pid=35641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107117.445:6210): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107117.445:6211): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107117.779:6212): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107117.779:6213): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107117.810:6214): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107117.810:6215): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107117.831:6216): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107117.831:6217): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107117.864:6218): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107117.864:6219): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107117.891:6220): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107117.891:6221): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107117.958:6222): pid=35691 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107117.959:6223): pid=35691 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747661686B66646F766D767967626A68717461706B6B796166786677667A7976203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107117.959:6224): pid=35691 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107117.962:6225): pid=35691 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107118.128:6226): pid=35691 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107118.128:6227): pid=35691 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107118.132:6228): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107118.132:6229): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107118.160:6230): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107118.160:6231): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107118.194:6232): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107118.194:6233): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107118.218:6234): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107118.218:6235): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107118.251:6236): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107118.251:6237): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107118.273:6238): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107118.273:6239): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107118.329:6240): pid=35734 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107118.329:6241): pid=35734 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636A657A75756A63727678726371677977766C636577616E6476736464697765203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107118.330:6242): pid=35734 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107118.332:6243): pid=35734 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107118.513:6244): pid=35734 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107118.514:6245): pid=35734 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107118.517:6246): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107118.518:6247): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107118.538:6248): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107118.538:6249): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107118.568:6250): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107118.568:6251): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107118.725:6252): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107118.725:6253): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107118.786:6254): pid=35764 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107118.786:6255): pid=35764 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A766C7462787477646272616C716F616478746E6575626173686C7362716463203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107118.787:6256): pid=35764 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107118.790:6257): pid=35764 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107118.971:6258): pid=35764 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107118.972:6259): pid=35764 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107118.975:6260): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107118.975:6261): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107119.238:6262): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107119.239:6263): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107119.269:6264): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107119.270:6265): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107119.286:6266): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107119.286:6267): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107119.322:6268): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107119.322:6269): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107119.345:6270): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107119.345:6271): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107119.407:6272): pid=35812 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107119.407:6273): pid=35812 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7071796E636E7262707675736470657A6E67716E616278676E71737777756F61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107119.408:6274): pid=35812 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107119.410:6275): pid=35812 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107119.571:6276): pid=35812 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107119.571:6277): pid=35812 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107119.574:6278): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107119.575:6279): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107119.602:6280): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107119.602:6281): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107119.634:6282): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107119.634:6283): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107119.655:6284): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107119.655:6285): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107119.682:6286): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107119.682:6287): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107119.704:6288): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107119.704:6289): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107119.756:6290): pid=35855 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107119.756:6291): pid=35855 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77636B75636668786C6D73776272776A616E6E737674746D7A6C7A6A6F736E69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107119.757:6292): pid=35855 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107119.759:6293): pid=35855 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107119.918:6294): pid=35855 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107119.919:6295): pid=35855 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107119.923:6296): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107119.924:6297): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107119.944:6298): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107119.944:6299): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107119.970:6300): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107119.970:6301): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107120.290:6302): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107120.290:6303): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107120.340:6304): pid=35885 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107120.341:6305): pid=35885 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696B63786C676F736D627A756A79667A64626A7A726F797A6568746577666D78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107120.341:6306): pid=35885 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107120.344:6307): pid=35885 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107120.541:6308): pid=35885 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107120.541:6309): pid=35885 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107120.545:6310): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107120.546:6311): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107121.151:6312): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107121.152:6313): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107121.207:6314): pid=35901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107121.207:6315): pid=35901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64706C706B6563687763736673786763757A796D67796C6D7777796377716971203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107121.208:6316): pid=35901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107121.210:6317): pid=35901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107121.409:6318): pid=35901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107121.410:6319): pid=35901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107121.413:6320): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107121.413:6321): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107121.538:6322): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107121.538:6323): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107121.597:6324): pid=35918 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107121.598:6325): pid=35918 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7275736E687A7A747061726B77636C6578716168726874626B61706E67786E73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107121.598:6326): pid=35918 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107121.601:6327): pid=35918 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107121.763:6328): pid=35918 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107121.763:6329): pid=35918 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107121.767:6330): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107121.767:6331): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107121.855:6332): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107121.855:6333): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107121.917:6334): pid=35934 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107121.918:6335): pid=35934 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787A72617367667176616D667478716D747763717A68796D62746F6161737679203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107121.919:6336): pid=35934 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107121.922:6337): pid=35934 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107122.633:6338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107122.649:6339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107122.678:6340): pid=35934 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107122.678:6341): pid=35934 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107122.682:6342): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107122.682:6343): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107122.927:6344): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107122.927:6345): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107122.987:6346): pid=35956 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107122.987:6347): pid=35956 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7575687762726F7A7175686173616F6F6E646C796F6371706D786762677566203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107122.988:6348): pid=35956 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107122.992:6349): pid=35956 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107131.082:6350): pid=35956 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107131.083:6351): pid=35956 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107131.086:6352): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107131.086:6353): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107131.245:6354): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107131.245:6355): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107131.292:6356): pid=36048 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107131.292:6357): pid=36048 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616F757878726B6B6B65626D70776763726F637764747275786B766977656A72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107131.293:6358): pid=36048 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107131.296:6359): pid=36048 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107131.548:6360): pid=36048 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107131.548:6361): pid=36048 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107131.551:6362): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107131.551:6363): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107131.750:6364): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107131.750:6365): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107131.836:6366): pid=36075 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107131.837:6367): pid=36075 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756E6D6364776C736C7478746B716A6C75726A71736172756F676D78726C7A6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107131.838:6368): pid=36075 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107131.840:6369): pid=36075 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107131.996:6370): pid=36075 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107131.997:6371): pid=36075 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107132.000:6372): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107132.000:6373): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107132.936:6374): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107132.936:6375): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107132.995:6376): pid=36092 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107132.995:6377): pid=36092 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666678627577727A6A6E70636F6A796B6B6C71626D6674746571726A776B6776203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107132.997:6378): pid=36092 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107133.000:6379): pid=36092 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107135.911:6380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107135.927:6381): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107135.927:6382): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107135.927:6383): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107139.724:6384): pid=36092 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107139.724:6385): pid=36092 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107139.729:6386): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107139.729:6387): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107139.863:6388): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107139.863:6389): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107139.923:6390): pid=36161 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107139.923:6391): pid=36161 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7068777374726E797176636E71707A736B6A676562666B677A687A6E68746E69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107139.924:6392): pid=36161 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107139.927:6393): pid=36161 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107140.161:6394): pid=36161 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107140.162:6395): pid=36161 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107140.165:6396): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107140.165:6397): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107140.283:6398): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107140.283:6399): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107140.338:6400): pid=36188 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107140.338:6401): pid=36188 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61636C786B706C6B6B647176626A62787473656C646A786D6C7779756C617363203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107140.339:6402): pid=36188 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107140.341:6403): pid=36188 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107144.764:6404): prog-id=175 op=LOAD type=BPF msg=audit(1770107144.764:6405): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107144.764:6406): prog-id=176 op=LOAD type=BPF msg=audit(1770107144.764:6407): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107144.913:6408): prog-id=177 op=LOAD type=BPF msg=audit(1770107144.913:6409): prog-id=178 op=LOAD type=BPF msg=audit(1770107144.913:6410): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107144.913:6411): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107144.914:6412): prog-id=179 op=LOAD type=BPF msg=audit(1770107144.914:6413): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107144.917:6414): prog-id=180 op=LOAD type=BPF msg=audit(1770107144.917:6415): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107144.919:6416): prog-id=181 op=LOAD type=BPF msg=audit(1770107144.919:6417): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107144.919:6418): prog-id=182 op=LOAD type=BPF msg=audit(1770107144.919:6419): prog-id=183 op=LOAD type=BPF msg=audit(1770107144.919:6420): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107144.919:6421): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107144.920:6422): prog-id=184 op=LOAD type=BPF msg=audit(1770107144.920:6423): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107144.920:6424): prog-id=185 op=LOAD type=BPF msg=audit(1770107144.920:6425): prog-id=186 op=LOAD type=BPF msg=audit(1770107144.920:6426): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107144.920:6427): prog-id=0 op=UNLOAD type=MAC_POLICY_LOAD msg=audit(1770107156.789:6428): auid=1002 ses=13 lsm=selinux res=1AUID="tripleo-admin" type=SYSCALL msg=audit(1770107156.789:6428): arch=c000003e syscall=1 success=yes exit=3546155 a0=4 a1=7f0a45a00000 a2=361c2b a3=0 items=0 ppid=36220 pid=36525 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107156.789:6428): proctitle="/usr/sbin/load_policy" type=BPF msg=audit(1770107157.923:6429): prog-id=187 op=LOAD type=BPF msg=audit(1770107157.924:6430): prog-id=188 op=LOAD type=BPF msg=audit(1770107157.924:6431): prog-id=189 op=LOAD type=BPF msg=audit(1770107157.925:6432): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107157.925:6433): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107157.925:6434): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107157.930:6435): prog-id=190 op=LOAD type=BPF msg=audit(1770107157.930:6436): prog-id=191 op=LOAD type=BPF msg=audit(1770107157.930:6437): prog-id=192 op=LOAD type=BPF msg=audit(1770107157.931:6438): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107157.931:6439): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107157.931:6440): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107157.935:6441): prog-id=193 op=LOAD type=BPF msg=audit(1770107157.935:6442): prog-id=194 op=LOAD type=BPF msg=audit(1770107157.935:6443): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107157.935:6444): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107158.066:6445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r4b8379e39b054151a8d64e8d595c4d9c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107158.293:6446): prog-id=195 op=LOAD type=BPF msg=audit(1770107158.294:6447): prog-id=196 op=LOAD type=BPF msg=audit(1770107158.294:6448): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.294:6449): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.295:6450): prog-id=197 op=LOAD type=BPF msg=audit(1770107158.295:6451): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.296:6452): prog-id=198 op=LOAD type=BPF msg=audit(1770107158.296:6453): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.296:6454): prog-id=199 op=LOAD type=BPF msg=audit(1770107158.296:6455): prog-id=200 op=LOAD type=BPF msg=audit(1770107158.296:6456): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.296:6457): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.298:6458): prog-id=201 op=LOAD type=BPF msg=audit(1770107158.298:6459): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.298:6460): prog-id=202 op=LOAD type=BPF msg=audit(1770107158.298:6461): prog-id=203 op=LOAD type=BPF msg=audit(1770107158.298:6462): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.298:6463): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.300:6464): prog-id=204 op=LOAD type=BPF msg=audit(1770107158.300:6465): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107158.334:6466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r641ff949ca0340f5b006288c97c97266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107158.363:6467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107158.365:6468): prog-id=205 op=LOAD type=BPF msg=audit(1770107158.365:6469): prog-id=206 op=LOAD type=BPF msg=audit(1770107158.365:6470): prog-id=207 op=LOAD type=SERVICE_STOP msg=audit(1770107158.369:6471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107158.370:6472): prog-id=208 op=LOAD type=BPF msg=audit(1770107158.370:6473): prog-id=209 op=LOAD type=BPF msg=audit(1770107158.373:6474): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.373:6475): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.373:6476): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.380:6477): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.380:6478): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107158.380:6479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107158.419:6480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107158.860:6481): prog-id=210 op=LOAD type=BPF msg=audit(1770107158.860:6482): prog-id=211 op=LOAD type=BPF msg=audit(1770107158.860:6483): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.860:6484): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.861:6485): prog-id=212 op=LOAD type=BPF msg=audit(1770107158.861:6486): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.862:6487): prog-id=213 op=LOAD type=BPF msg=audit(1770107158.862:6488): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.862:6489): prog-id=214 op=LOAD type=BPF msg=audit(1770107158.862:6490): prog-id=215 op=LOAD type=BPF msg=audit(1770107158.862:6491): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.862:6492): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.864:6493): prog-id=216 op=LOAD type=BPF msg=audit(1770107158.864:6494): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.864:6495): prog-id=217 op=LOAD type=BPF msg=audit(1770107158.864:6496): prog-id=218 op=LOAD type=BPF msg=audit(1770107158.864:6497): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.864:6498): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107158.866:6499): prog-id=219 op=LOAD type=BPF msg=audit(1770107158.866:6500): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107159.077:6501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107159.077:6502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107159.079:6503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r4b8379e39b054151a8d64e8d595c4d9c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107159.080:6504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r641ff949ca0340f5b006288c97c97266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SOFTWARE_UPDATE msg=audit(1770107159.360:6505): pid=36190 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-rpm-macros-252-14.el9_2.8.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107159.360:6506): pid=36190 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-libs-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107159.360:6507): pid=36190 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-pam-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107159.360:6508): pid=36190 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107159.360:6509): pid=36190 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="systemd-container-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107159.360:6510): pid=36190 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-udev-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770107160.241:6511): pid=36188 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107160.241:6512): pid=36188 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107160.246:6513): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107160.246:6514): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107160.417:6515): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107160.417:6516): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107160.481:6517): pid=37936 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107160.481:6518): pid=37936 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6164626266667A61637270626D6E686B6E707561666B6579726A71776C7377203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107160.482:6519): pid=37936 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107160.488:6520): pid=37936 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107160.674:6521): pid=37936 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107160.674:6522): pid=37936 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107160.678:6523): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107160.678:6524): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107160.830:6525): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107160.830:6526): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107160.893:6527): pid=37955 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107160.894:6528): pid=37955 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7172717870676B68706F74686578776467707A646B696E6A6E636162656A6F73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107160.894:6529): pid=37955 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107160.897:6530): pid=37955 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107161.087:6531): pid=37955 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107161.087:6532): pid=37955 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107161.090:6533): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107161.090:6534): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107162.231:6535): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107162.231:6536): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107162.271:6537): pid=37974 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107162.271:6538): pid=37974 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61637770637071756B676464786465657464627175716B72667861617A65656B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107162.271:6539): pid=37974 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107162.272:6540): pid=37974 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107168.348:6541): pid=37974 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107168.348:6542): pid=37974 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107168.352:6543): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107168.352:6544): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107168.508:6545): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107168.508:6546): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107168.571:6547): pid=38041 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107168.572:6548): pid=38041 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726A78646E6465626C6A686A64756971767762627863656B666864647A6F7076203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107168.572:6549): pid=38041 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107168.577:6550): pid=38041 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107168.826:6551): pid=38041 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107168.827:6552): pid=38041 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107168.831:6553): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107168.831:6554): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107169.121:6555): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107169.121:6556): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107169.183:6557): pid=38068 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107169.184:6558): pid=38068 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7479676A68736B64736B71796F626767677366616E6D766B6775696F786173203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107169.184:6559): pid=38068 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107169.187:6560): pid=38068 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107171.893:6561): pid=38068 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107171.893:6562): pid=38068 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107171.898:6563): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107171.898:6564): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107171.980:6565): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107171.980:6566): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107172.043:6567): pid=38157 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107172.043:6568): pid=38157 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6678726676716B6973666F776166656F6B7468777969756E747A6F796779726C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107172.044:6569): pid=38157 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107172.046:6570): pid=38157 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107173.811:6571): pid=38157 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107173.812:6572): pid=38157 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107173.816:6573): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107173.816:6574): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107173.889:6575): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107173.889:6576): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107173.945:6577): pid=38235 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107173.945:6578): pid=38235 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A637A6473716B7564616A656D796761686D707A707467657867726A7274636C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107173.946:6579): pid=38235 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107173.948:6580): pid=38235 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107175.562:6581): pid=38235 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107175.562:6582): pid=38235 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107175.566:6583): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107175.566:6584): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107175.637:6585): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107175.637:6586): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107175.699:6587): pid=38314 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107175.700:6588): pid=38314 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716A6C6F6A6C666C756A6A6B65767577777171766A6166736B74767164626563203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107175.700:6589): pid=38314 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107175.703:6590): pid=38314 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107183.889:6591): pid=38314 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107183.889:6592): pid=38314 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107183.893:6593): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107183.893:6594): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107183.967:6595): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107183.967:6596): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107184.025:6597): pid=38430 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107184.026:6598): pid=38430 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736470646F6673626E646D6465756E647976726C73776D6E6B727264796B6F70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107184.026:6599): pid=38430 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107184.029:6600): pid=38430 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107202.541:6601): pid=38430 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107202.541:6602): pid=38430 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107202.544:6603): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107202.544:6604): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107202.633:6605): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107202.633:6606): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107202.696:6607): pid=39008 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107202.696:6608): pid=39008 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7376776F6D626D7368637675656877676366766974726B767571797365796D66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107202.697:6609): pid=39008 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107202.700:6610): pid=39008 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107215.095:6611): pid=39008 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107215.095:6612): pid=39008 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107215.099:6613): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107215.099:6614): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107215.145:6615): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107215.146:6616): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107215.197:6617): pid=39098 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107215.197:6618): pid=39098 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71637464796C6772647665777A6C686E7164747174636776627069716D786579203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107215.198:6619): pid=39098 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107215.200:6620): pid=39098 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107217.887:6621): pid=39098 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107217.888:6622): pid=39098 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107217.891:6623): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107217.891:6624): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107217.965:6625): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107217.965:6626): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107218.023:6627): pid=39189 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107218.023:6628): pid=39189 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776D6E7071716F6C77637A796E64626D6C7363726F676E7A6164776B77697A75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107218.024:6629): pid=39189 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107218.026:6630): pid=39189 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107222.621:6631): pid=39189 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107222.621:6632): pid=39189 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107222.625:6633): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107222.625:6634): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107222.710:6635): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107222.710:6636): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107222.765:6637): pid=39281 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107222.765:6638): pid=39281 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B666A7268736464637270716A636A6462616E76717A686A65766476626B6D67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107222.766:6639): pid=39281 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107222.768:6640): pid=39281 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107230.014:6641): pid=39281 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107230.014:6642): pid=39281 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107230.018:6643): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107230.018:6644): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107230.101:6645): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107230.101:6646): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107230.161:6647): pid=39393 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107230.163:6648): pid=39393 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726C6D7172637068686C6A78726F617867626F6A6A68626D7679677472707866203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107230.163:6649): pid=39393 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107230.166:6650): pid=39393 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107238.311:6651): pid=39393 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107238.311:6652): pid=39393 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107238.315:6653): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107238.315:6654): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107238.395:6655): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107238.395:6656): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107238.454:6657): pid=39624 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107238.454:6658): pid=39624 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7270696E72726D6F6F746C706977646D7578636D657A666D686E7267716D6361203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107238.455:6659): pid=39624 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107238.457:6660): pid=39624 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107241.323:6661): pid=39624 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107241.323:6662): pid=39624 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107241.327:6663): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107241.327:6664): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107241.412:6665): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107241.412:6666): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107241.462:6667): pid=39713 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107241.463:6668): pid=39713 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686E6E6D7369717062676369617766716F6167616E796A6564766F657063696E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107241.463:6669): pid=39713 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107241.465:6670): pid=39713 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107243.699:6671): pid=39713 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107243.699:6672): pid=39713 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107243.703:6673): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107243.703:6674): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107243.776:6675): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107243.776:6676): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107243.838:6677): pid=39806 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107243.838:6678): pid=39806 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6F74647875616D6A687174777864707075796C716E69727173746962696969203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107243.839:6679): pid=39806 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107243.841:6680): pid=39806 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107246.263:6681): pid=39806 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107246.264:6682): pid=39806 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107246.267:6683): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107246.268:6684): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107246.350:6685): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107246.350:6686): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107246.404:6687): pid=39897 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107246.404:6688): pid=39897 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D67666565717066747374726271746D6D6C75746B766E666875746169676F79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107246.405:6689): pid=39897 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107246.407:6690): pid=39897 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107250.572:6691): pid=39897 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107250.573:6692): pid=39897 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107250.577:6693): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107250.577:6694): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107250.651:6695): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107250.651:6696): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107250.707:6697): pid=40000 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107250.707:6698): pid=40000 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66687572736A67686C6A7264686866626D727272736C617A6F687062657A777A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107250.707:6699): pid=40000 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107250.710:6700): pid=40000 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107252.793:6701): pid=40000 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107252.793:6702): pid=40000 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107252.797:6703): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107252.797:6704): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107252.870:6705): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107252.870:6706): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107252.931:6707): pid=40089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107252.931:6708): pid=40089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76776F62626366696862616C6D636378696B6C6B67726770726C6C7670686469203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107252.932:6709): pid=40089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107252.935:6710): pid=40089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107256.560:6711): pid=40089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107256.561:6712): pid=40089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107256.565:6713): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107256.565:6714): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107256.754:6715): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107256.754:6716): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107256.813:6717): pid=40181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107256.814:6718): pid=40181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746D6E65637877666A61737772686E6365766578796F67646D6D6F72766A6B64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107256.814:6719): pid=40181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107256.816:6720): pid=40181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107256.990:6721): pid=40181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107256.991:6722): pid=40181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107256.994:6723): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107256.994:6724): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107257.265:6725): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107257.265:6726): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107257.297:6727): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107257.297:6728): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107257.318:6729): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107257.318:6730): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107257.356:6731): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107257.356:6732): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107257.379:6733): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107257.379:6734): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107257.438:6735): pid=40231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107257.438:6736): pid=40231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6678637173626F716F63787764706473616261786F6B716A6461707273786E71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107257.439:6737): pid=40231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107257.442:6738): pid=40231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107257.608:6739): pid=40231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107257.608:6740): pid=40231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107257.611:6741): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107257.611:6742): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107257.633:6743): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107257.633:6744): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107257.706:6745): pid=40249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107257.706:6746): pid=40249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6371706E6E647369696F78646F67627A6378746C766C656373616676656F626B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107257.707:6747): pid=40249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107257.709:6748): pid=40249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107257.884:6749): pid=40249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107257.884:6750): pid=40249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107257.888:6751): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107257.888:6752): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107257.910:6753): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107257.910:6754): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107257.940:6755): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107257.940:6756): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107258.034:6757): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107258.034:6758): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107258.059:6759): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107258.060:6760): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107258.083:6761): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107258.083:6762): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107258.115:6763): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107258.116:6764): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107258.148:6765): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107258.148:6766): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107258.184:6767): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107258.184:6768): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107258.331:6769): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107258.332:6770): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107258.372:6771): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107258.372:6772): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107258.399:6773): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107258.399:6774): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107258.431:6775): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107258.431:6776): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107258.460:6777): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107258.461:6778): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107258.521:6779): pid=40353 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107258.521:6780): pid=40353 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107258.522:6781): pid=40353 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107258.524:6782): pid=40353 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107258.702:6783): pid=40353 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107258.702:6784): pid=40353 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107258.705:6785): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107258.706:6786): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107258.907:6787): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107258.907:6788): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107258.967:6789): pid=40377 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107258.967:6790): pid=40377 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6D78786C6B6D7068647070736E776F686B646E736D6466616A727A61706377203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107258.968:6791): pid=40377 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107258.970:6792): pid=40377 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107259.128:6793): pid=40377 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107259.129:6794): pid=40377 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107259.132:6795): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107259.132:6796): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107269.174:6797): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107269.175:6798): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107269.236:6799): pid=40515 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107269.237:6800): pid=40515 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64727475627673697563646B76676B707462746B6B73767A6C6C796F73706471203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107269.238:6801): pid=40515 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107269.241:6802): pid=40515 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107269.398:6803): pid=40515 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107269.399:6804): pid=40515 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107269.402:6805): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107269.402:6806): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=ADD_GROUP msg=audit(1770107273.514:6807): pid=40608 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=189 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="haclient" type=GRP_MGMT msg=audit(1770107273.519:6808): pid=40608 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=189 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="haclient" type=ADD_USER msg=audit(1770107273.569:6809): pid=40615 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="hacluster" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1770107274.266:6810): pid=34666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=34666 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770107274.268:6811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107274.287:6812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107274.511:6813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rf983e3fd4fd14d84b15b95e3e2cbc85d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107274.715:6814): prog-id=220 op=LOAD type=BPF msg=audit(1770107274.715:6815): prog-id=221 op=LOAD type=BPF msg=audit(1770107274.715:6816): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107274.715:6817): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107274.716:6818): prog-id=222 op=LOAD type=BPF msg=audit(1770107274.716:6819): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107274.718:6820): prog-id=223 op=LOAD type=BPF msg=audit(1770107274.718:6821): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107274.718:6822): prog-id=224 op=LOAD type=BPF msg=audit(1770107274.718:6823): prog-id=225 op=LOAD type=BPF msg=audit(1770107274.718:6824): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107274.718:6825): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107274.720:6826): prog-id=226 op=LOAD type=BPF msg=audit(1770107274.721:6827): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107274.721:6828): prog-id=227 op=LOAD type=BPF msg=audit(1770107274.721:6829): prog-id=228 op=LOAD type=BPF msg=audit(1770107274.721:6830): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107274.721:6831): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107274.723:6832): prog-id=229 op=LOAD type=BPF msg=audit(1770107274.723:6833): prog-id=0 op=UNLOAD type=SOFTWARE_UPDATE msg=audit(1770107274.772:6834): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nspr-4.35.0-17.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6835): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libqb-2.0.6-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6836): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-util-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6837): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="corosynclib-3.1.7-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6838): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Digest-1.19-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6839): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Digest-MD5-2.58-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6840): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-B-0:1.80-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6841): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-FileHandle-0:2.03-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6842): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Data-Dumper-2.174-462.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6843): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-libnet-3.13-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6844): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-AutoLoader-0:5.74-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6845): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-base-0:2.27-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6846): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-URI-5.09-3.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6847): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Time-Local-2:1.300-7.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6848): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Mozilla-CA-20200520-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6849): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-if-0:0.60.800-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6850): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IO-Socket-IP-0.41-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6851): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Text-Tabs+Wrap-2013.0523-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6852): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Net-SSLeay-1.92-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6853): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Escapes-1:1.07-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6854): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Path-2.18-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6855): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IO-Socket-SSL-2.073-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6856): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Term-ANSIColor-5.01-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6857): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Class-Struct-0:0.66-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6858): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-POSIX-0:1.94-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6859): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IPC-Open3-0:1.21-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6860): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-subs-0:1.03-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6861): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Simple-1:3.42-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6862): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Term-Cap-1.17-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6863): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Temp-1:0.231.100-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6864): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-HTTP-Tiny-0.076-461.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6865): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Socket-4:2.031-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6866): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-SelectSaver-0:1.02-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6867): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Symbol-0:1.08-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6868): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-stat-0:1.09-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6869): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-podlators-1:4.14-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6870): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Perldoc-3.28.01-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.772:6871): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Text-ParseWords-3.30-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6872): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Fcntl-0:1.13-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6873): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-mro-0:1.23-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6874): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IO-0:1.43-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6875): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-overloading-0:0.02-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6876): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Usage-4:2.01-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6877): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-parent-1:0.238-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6878): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-MIME-Base64-3.16-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6879): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Scalar-List-Utils-4:1.56-461.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6880): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-constant-1.33-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6881): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Errno-0:1.30-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6882): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Basename-0:2.85-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6883): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Getopt-Std-0:1.12-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6884): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Storable-1:3.21-460.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6885): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-overload-0:1.31-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6886): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-vars-0:1.05-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6887): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Getopt-Long-1:2.52-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6888): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Exporter-5.74-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6889): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Carp-1.50-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6890): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-PathTools-3.78-461.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6891): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-NDBM_File-0:1.15-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6892): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Encode-4:3.08-462.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6893): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-libs-4:5.32.1-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6894): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-interpreter-4:5.32.1-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6895): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6896): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-TimeDate-1:2.33-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6897): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-softokn-freebl-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6898): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-softokn-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6899): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6900): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-sysinit-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6901): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-crypto-nss-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6902): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="net-snmp-libs-1:5.9.1-11.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6903): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnozzle1-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6904): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="corosync-3.1.7-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6905): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pkgconf-m4-1.7.3-10.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6906): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libpkgconf-1.7.3-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6907): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pkgconf-1.7.3-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6908): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pkgconf-pkg-config-1.7.3-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6909): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pacemaker-schemas-2.1.5-9.el9_2.4.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6910): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pacemaker-libs-2.1.5-9.el9_2.4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6911): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pacemaker-cluster-libs-2.1.5-9.el9_2.4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6912): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="net-tools-2.0-0.62.20160912git.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6913): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="resource-agents-4.10.0-34.el9_2.9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6914): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pacemaker-cli-2.1.5-9.el9_2.4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107274.773:6915): pid=40498 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pacemaker-2.1.5-9.el9_2.4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107276.510:6916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107276.510:6917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107276.512:6918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rf983e3fd4fd14d84b15b95e3e2cbc85d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107279.474:6919): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107279.474:6920): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107279.524:6921): pid=42418 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107279.524:6922): pid=42418 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6870796D69616C62647168717361746C796F676A76696F6F7875757775677767203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107279.525:6923): pid=42418 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107279.530:6924): pid=42418 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107279.656:6925): pid=42418 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107279.656:6926): pid=42418 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107279.659:6927): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107279.659:6928): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=BPF msg=audit(1770107283.106:6929): prog-id=230 op=LOAD type=BPF msg=audit(1770107283.106:6930): prog-id=231 op=LOAD type=BPF msg=audit(1770107283.106:6931): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107283.106:6932): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107283.107:6933): prog-id=232 op=LOAD type=BPF msg=audit(1770107283.107:6934): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107283.108:6935): prog-id=233 op=LOAD type=BPF msg=audit(1770107283.108:6936): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107283.108:6937): prog-id=234 op=LOAD type=BPF msg=audit(1770107283.108:6938): prog-id=235 op=LOAD type=BPF msg=audit(1770107283.109:6939): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107283.109:6940): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107283.110:6941): prog-id=236 op=LOAD type=BPF msg=audit(1770107283.110:6942): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107283.110:6943): prog-id=237 op=LOAD type=BPF msg=audit(1770107283.110:6944): prog-id=238 op=LOAD type=BPF msg=audit(1770107283.110:6945): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107283.110:6946): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107283.112:6947): prog-id=239 op=LOAD type=BPF msg=audit(1770107283.112:6948): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107283.269:6949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r165b7c28b05c40288b9b01003dd37aa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107283.512:6950): prog-id=240 op=LOAD type=BPF msg=audit(1770107283.512:6951): prog-id=241 op=LOAD type=BPF msg=audit(1770107283.512:6952): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107283.512:6953): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107283.513:6954): prog-id=242 op=LOAD type=BPF msg=audit(1770107283.513:6955): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107283.514:6956): prog-id=243 op=LOAD type=BPF msg=audit(1770107283.514:6957): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107283.514:6958): prog-id=244 op=LOAD type=BPF msg=audit(1770107283.514:6959): prog-id=245 op=LOAD type=BPF msg=audit(1770107283.514:6960): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107283.514:6961): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107283.516:6962): prog-id=246 op=LOAD type=BPF msg=audit(1770107283.516:6963): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107283.516:6964): prog-id=247 op=LOAD type=BPF msg=audit(1770107283.516:6965): prog-id=248 op=LOAD type=BPF msg=audit(1770107283.516:6966): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107283.516:6967): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107283.518:6968): prog-id=249 op=LOAD type=BPF msg=audit(1770107283.518:6969): prog-id=0 op=UNLOAD type=SOFTWARE_UPDATE msg=audit(1770107283.544:6970): pid=42404 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-tornado-6.4.2-1.el9_2.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107283.544:6971): pid=42404 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pycurl-7.43.0.6-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107283.544:6972): pid=42404 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-crypto-openssl-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107283.544:6973): pid=42404 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-crypto-plugins-all-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107283.544:6974): pid=42404 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-zstd-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107283.544:6975): pid=42404 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-zlib-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107283.544:6976): pid=42404 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-lzo2-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107283.544:6977): pid=42404 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-lzma-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107283.544:6978): pid=42404 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-lz4-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107283.544:6979): pid=42404 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-bzip2-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107283.544:6980): pid=42404 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-plugins-all-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107283.544:6981): pid=42404 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-plugins-all-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107283.544:6982): pid=42404 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pcs-0.11.4-7.el9_2.5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107283.841:6983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107283.841:6984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107283.842:6985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r165b7c28b05c40288b9b01003dd37aa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_MGMT msg=audit(1770107284.817:6986): pid=42857 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="haclient" acct="hacluster" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_MGMT msg=audit(1770107284.817:6987): pid=42857 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user-to-shadow-group grp="haclient" acct="hacluster" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=BPF msg=audit(1770107285.121:6988): prog-id=250 op=LOAD type=BPF msg=audit(1770107285.121:6989): prog-id=251 op=LOAD type=BPF msg=audit(1770107285.121:6990): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107285.121:6991): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107285.121:6992): prog-id=252 op=LOAD type=BPF msg=audit(1770107285.122:6993): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107285.123:6994): prog-id=253 op=LOAD type=BPF msg=audit(1770107285.123:6995): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107285.123:6996): prog-id=254 op=LOAD type=BPF msg=audit(1770107285.123:6997): prog-id=255 op=LOAD type=BPF msg=audit(1770107285.123:6998): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107285.123:6999): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107285.125:7000): prog-id=256 op=LOAD type=BPF msg=audit(1770107285.125:7001): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107285.125:7002): prog-id=257 op=LOAD type=BPF msg=audit(1770107285.125:7003): prog-id=258 op=LOAD type=BPF msg=audit(1770107285.125:7004): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107285.125:7005): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107285.126:7006): prog-id=259 op=LOAD type=BPF msg=audit(1770107285.126:7007): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107285.797:7008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=pcsd-ruby comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107287.039:7009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=pcsd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107287.226:7010): prog-id=260 op=LOAD type=BPF msg=audit(1770107287.226:7011): prog-id=261 op=LOAD type=BPF msg=audit(1770107287.226:7012): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107287.226:7013): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107287.227:7014): prog-id=262 op=LOAD type=BPF msg=audit(1770107287.227:7015): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107287.228:7016): prog-id=263 op=LOAD type=BPF msg=audit(1770107287.228:7017): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107287.228:7018): prog-id=264 op=LOAD type=BPF msg=audit(1770107287.228:7019): prog-id=265 op=LOAD type=BPF msg=audit(1770107287.228:7020): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107287.228:7021): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107287.230:7022): prog-id=266 op=LOAD type=BPF msg=audit(1770107287.230:7023): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107287.230:7024): prog-id=267 op=LOAD type=BPF msg=audit(1770107287.230:7025): prog-id=268 op=LOAD type=BPF msg=audit(1770107287.230:7026): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107287.230:7027): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107287.232:7028): prog-id=269 op=LOAD type=BPF msg=audit(1770107287.232:7029): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107287.417:7030): prog-id=270 op=LOAD type=BPF msg=audit(1770107287.417:7031): prog-id=271 op=LOAD type=BPF msg=audit(1770107287.417:7032): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107287.417:7033): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107287.417:7034): prog-id=272 op=LOAD type=BPF msg=audit(1770107287.417:7035): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107287.419:7036): prog-id=273 op=LOAD type=BPF msg=audit(1770107287.419:7037): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107287.419:7038): prog-id=274 op=LOAD type=BPF msg=audit(1770107287.419:7039): prog-id=275 op=LOAD type=BPF msg=audit(1770107287.419:7040): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107287.419:7041): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107287.421:7042): prog-id=276 op=LOAD type=BPF msg=audit(1770107287.421:7043): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107287.421:7044): prog-id=277 op=LOAD type=BPF msg=audit(1770107287.421:7045): prog-id=278 op=LOAD type=BPF msg=audit(1770107287.421:7046): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107287.421:7047): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107287.422:7048): prog-id=279 op=LOAD type=BPF msg=audit(1770107287.422:7049): prog-id=0 op=UNLOAD type=USER_AUTH msg=audit(1770107289.004:7050): pid=42906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cluster_t:s0 msg='op=PAM:authentication grantors=pam_unix acct="hacluster" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770107289.020:7051): pid=42906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cluster_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="hacluster" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107289.725:7052): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107289.726:7053): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107289.780:7054): pid=43113 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107289.780:7055): pid=43113 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7663726B6C6976627A6A72796C6A69786670766C726F626563746B6A796B69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107289.780:7056): pid=43113 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107289.783:7057): pid=43113 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107289.913:7058): pid=43113 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107289.913:7059): pid=43113 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107289.916:7060): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107289.916:7061): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=BPF msg=audit(1770107291.984:7062): prog-id=280 op=LOAD type=BPF msg=audit(1770107291.984:7063): prog-id=281 op=LOAD type=BPF msg=audit(1770107291.984:7064): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107291.984:7065): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107291.985:7066): prog-id=282 op=LOAD type=BPF msg=audit(1770107291.985:7067): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107291.986:7068): prog-id=283 op=LOAD type=BPF msg=audit(1770107291.986:7069): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107291.986:7070): prog-id=284 op=LOAD type=BPF msg=audit(1770107291.986:7071): prog-id=285 op=LOAD type=BPF msg=audit(1770107291.986:7072): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107291.986:7073): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107291.988:7074): prog-id=286 op=LOAD type=BPF msg=audit(1770107291.988:7075): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107291.988:7076): prog-id=287 op=LOAD type=BPF msg=audit(1770107291.988:7077): prog-id=288 op=LOAD type=BPF msg=audit(1770107291.988:7078): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107291.988:7079): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107291.990:7080): prog-id=289 op=LOAD type=BPF msg=audit(1770107291.990:7081): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107292.180:7082): prog-id=290 op=LOAD type=BPF msg=audit(1770107292.180:7083): prog-id=291 op=LOAD type=BPF msg=audit(1770107292.180:7084): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107292.180:7085): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107292.181:7086): prog-id=292 op=LOAD type=BPF msg=audit(1770107292.181:7087): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107292.182:7088): prog-id=293 op=LOAD type=BPF msg=audit(1770107292.182:7089): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107292.182:7090): prog-id=294 op=LOAD type=BPF msg=audit(1770107292.182:7091): prog-id=295 op=LOAD type=BPF msg=audit(1770107292.182:7092): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107292.182:7093): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107292.184:7094): prog-id=296 op=LOAD type=BPF msg=audit(1770107292.184:7095): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107292.184:7096): prog-id=297 op=LOAD type=BPF msg=audit(1770107292.184:7097): prog-id=298 op=LOAD type=BPF msg=audit(1770107292.184:7098): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107292.184:7099): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107292.185:7100): prog-id=299 op=LOAD type=BPF msg=audit(1770107292.185:7101): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107294.304:7102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=corosync comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107294.326:7103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=pacemaker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107294.713:7104): prog-id=300 op=LOAD type=BPF msg=audit(1770107294.713:7105): prog-id=301 op=LOAD type=BPF msg=audit(1770107294.713:7106): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107294.713:7107): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107294.714:7108): prog-id=302 op=LOAD type=BPF msg=audit(1770107294.714:7109): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107294.715:7110): prog-id=303 op=LOAD type=BPF msg=audit(1770107294.715:7111): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107294.715:7112): prog-id=304 op=LOAD type=BPF msg=audit(1770107294.715:7113): prog-id=305 op=LOAD type=BPF msg=audit(1770107294.715:7114): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107294.716:7115): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107294.717:7116): prog-id=306 op=LOAD type=BPF msg=audit(1770107294.717:7117): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107294.717:7118): prog-id=307 op=LOAD type=BPF msg=audit(1770107294.717:7119): prog-id=308 op=LOAD type=BPF msg=audit(1770107294.717:7120): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107294.717:7121): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107294.719:7122): prog-id=309 op=LOAD type=BPF msg=audit(1770107294.719:7123): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107294.920:7124): prog-id=310 op=LOAD type=BPF msg=audit(1770107294.920:7125): prog-id=311 op=LOAD type=BPF msg=audit(1770107294.920:7126): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107294.920:7127): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107294.921:7128): prog-id=312 op=LOAD type=BPF msg=audit(1770107294.921:7129): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107294.922:7130): prog-id=313 op=LOAD type=BPF msg=audit(1770107294.923:7131): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107294.923:7132): prog-id=314 op=LOAD type=BPF msg=audit(1770107294.923:7133): prog-id=315 op=LOAD type=BPF msg=audit(1770107294.923:7134): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107294.923:7135): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107294.924:7136): prog-id=316 op=LOAD type=BPF msg=audit(1770107294.924:7137): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107294.924:7138): prog-id=317 op=LOAD type=BPF msg=audit(1770107294.925:7139): prog-id=318 op=LOAD type=BPF msg=audit(1770107294.925:7140): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107294.925:7141): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107294.926:7142): prog-id=319 op=LOAD type=BPF msg=audit(1770107294.926:7143): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.138:7144): prog-id=320 op=LOAD type=BPF msg=audit(1770107295.138:7145): prog-id=321 op=LOAD type=BPF msg=audit(1770107295.138:7146): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.138:7147): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.139:7148): prog-id=322 op=LOAD type=BPF msg=audit(1770107295.139:7149): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.140:7150): prog-id=323 op=LOAD type=BPF msg=audit(1770107295.140:7151): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.140:7152): prog-id=324 op=LOAD type=BPF msg=audit(1770107295.140:7153): prog-id=325 op=LOAD type=BPF msg=audit(1770107295.140:7154): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.140:7155): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.142:7156): prog-id=326 op=LOAD type=BPF msg=audit(1770107295.142:7157): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.142:7158): prog-id=327 op=LOAD type=BPF msg=audit(1770107295.142:7159): prog-id=328 op=LOAD type=BPF msg=audit(1770107295.142:7160): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.142:7161): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.143:7162): prog-id=329 op=LOAD type=BPF msg=audit(1770107295.143:7163): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.330:7164): prog-id=330 op=LOAD type=BPF msg=audit(1770107295.330:7165): prog-id=331 op=LOAD type=BPF msg=audit(1770107295.330:7166): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.330:7167): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.331:7168): prog-id=332 op=LOAD type=BPF msg=audit(1770107295.331:7169): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.332:7170): prog-id=333 op=LOAD type=BPF msg=audit(1770107295.332:7171): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.332:7172): prog-id=334 op=LOAD type=BPF msg=audit(1770107295.332:7173): prog-id=335 op=LOAD type=BPF msg=audit(1770107295.332:7174): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.332:7175): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.334:7176): prog-id=336 op=LOAD type=BPF msg=audit(1770107295.334:7177): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.334:7178): prog-id=337 op=LOAD type=BPF msg=audit(1770107295.334:7179): prog-id=338 op=LOAD type=BPF msg=audit(1770107295.334:7180): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.334:7181): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107295.336:7182): prog-id=339 op=LOAD type=BPF msg=audit(1770107295.336:7183): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1770107299.978:7184): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107299.978:7185): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107300.044:7186): pid=43441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107300.044:7187): pid=43441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F79616576706E766F6579796C63767A666E6971746B6971746A776279756E70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107300.045:7188): pid=43441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107300.051:7189): pid=43441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107300.216:7190): pid=43441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107300.216:7191): pid=43441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107300.220:7192): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107300.220:7193): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107310.291:7194): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107310.291:7195): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107310.358:7196): pid=43474 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107310.358:7197): pid=43474 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666F676278766A72647365786B7A6A717A75786D656B627765697268666F6869203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107310.359:7198): pid=43474 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107310.363:7199): pid=43474 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107310.538:7200): pid=43474 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107310.538:7201): pid=43474 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107310.542:7202): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107310.542:7203): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107320.607:7204): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107320.607:7205): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107320.657:7206): pid=43528 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107320.657:7207): pid=43528 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6968636C636D75796463676D76786C6A6C6975627569646A79646D7879706665203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107320.658:7208): pid=43528 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107320.660:7209): pid=43528 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107320.794:7210): pid=43528 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107320.794:7211): pid=43528 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107320.797:7212): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107320.797:7213): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107330.857:7214): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107330.857:7215): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107330.916:7216): pid=43550 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107330.917:7217): pid=43550 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736862786B77716E696A766C627661756A79646E68797262657772796A646467203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107330.917:7218): pid=43550 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107330.920:7219): pid=43550 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107331.080:7220): pid=43550 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107331.080:7221): pid=43550 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107331.084:7222): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107331.084:7223): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107331.504:7224): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107331.504:7225): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107331.562:7226): pid=43566 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107331.563:7227): pid=43566 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7A62726A6B746C6775686B76716F6E71776A6D677A616A767270776C636262203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107331.563:7228): pid=43566 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107331.566:7229): pid=43566 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107331.751:7230): pid=43566 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107331.752:7231): pid=43566 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107331.755:7232): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107331.756:7233): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107331.846:7234): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107331.846:7235): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107331.910:7236): pid=43582 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107331.910:7237): pid=43582 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B627567766463746E616E7878786478726E617264696278666F6976766F7161203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107331.912:7238): pid=43582 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107331.915:7239): pid=43582 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107332.069:7240): pid=43582 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107332.070:7241): pid=43582 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107332.074:7242): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107332.074:7243): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107332.244:7244): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107332.244:7245): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107332.270:7246): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107332.270:7247): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107332.282:7248): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107332.282:7249): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107332.319:7250): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107332.319:7251): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107332.334:7252): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107332.334:7253): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107332.385:7254): pid=43630 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107332.385:7255): pid=43630 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6F78767969726C6F676C61636678717A74626E6875716E716675747977646D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107332.386:7256): pid=43630 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107332.388:7257): pid=43630 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107332.539:7258): pid=43630 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107332.539:7259): pid=43630 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107332.542:7260): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107332.543:7261): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107332.569:7262): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107332.569:7263): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107332.604:7264): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107332.604:7265): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107332.630:7266): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107332.630:7267): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107332.659:7268): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107332.659:7269): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107332.679:7270): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107332.680:7271): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107332.729:7272): pid=43673 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107332.729:7273): pid=43673 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777568616C776A646875636F6769707A636E657576666378696B646E727A6C68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107332.730:7274): pid=43673 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107332.733:7275): pid=43673 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107332.889:7276): pid=43673 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107332.889:7277): pid=43673 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107332.892:7278): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107332.892:7279): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107332.909:7280): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107332.909:7281): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107332.929:7282): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107332.929:7283): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107333.018:7284): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107333.018:7285): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107333.060:7286): pid=43703 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107333.060:7287): pid=43703 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D797766676972736F7568636575656F716B737864736A697A73656873686B78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107333.061:7288): pid=43703 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107333.063:7289): pid=43703 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107333.218:7290): pid=43703 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107333.218:7291): pid=43703 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107333.221:7292): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107333.221:7293): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107333.336:7294): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107333.336:7295): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107333.375:7296): pid=43719 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107333.375:7297): pid=43719 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647373686F666A6772626B6676677A6E65716D727A6C76727366736D6A767170203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107333.376:7298): pid=43719 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107333.377:7299): pid=43719 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107333.885:7300): pid=43719 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107333.886:7301): pid=43719 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107333.889:7302): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107333.889:7303): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107334.221:7304): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107334.222:7305): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107334.281:7306): pid=43806 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107334.281:7307): pid=43806 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707177726774637278616569617561676B766D7373777A747173736171697578203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107334.281:7308): pid=43806 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107334.283:7309): pid=43806 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107334.511:7310): pid=43806 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107334.512:7311): pid=43806 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107334.515:7312): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107334.515:7313): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107334.738:7314): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107334.739:7315): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107334.801:7316): pid=43826 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107334.801:7317): pid=43826 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616D78646F7966696F6F657A616366616D756A747661696C68616F6877647763203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107334.802:7318): pid=43826 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107334.804:7319): pid=43826 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107334.992:7320): pid=43826 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107334.992:7321): pid=43826 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107334.995:7322): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107334.995:7323): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107335.113:7324): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107335.114:7325): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107335.175:7326): pid=43842 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107335.175:7327): pid=43842 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776C6D6B72776C6866747A6270656E67627372667277616F796B766966636A70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107335.176:7328): pid=43842 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107335.178:7329): pid=43842 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107335.516:7330): pid=43842 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107335.516:7331): pid=43842 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107335.520:7332): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107335.520:7333): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107335.860:7334): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107335.861:7335): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107335.912:7336): pid=43858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107335.912:7337): pid=43858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78646A7464616F66696B6F6B696F6C676F7161686163666961796E77736F6A6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107335.912:7338): pid=43858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107335.914:7339): pid=43858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107336.083:7340): pid=43858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107336.083:7341): pid=43858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107336.086:7342): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107336.086:7343): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107336.343:7344): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107336.343:7345): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107336.403:7346): pid=43874 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107336.403:7347): pid=43874 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687A6D626B766E666B7463646C63696C786373636D61736C676D637576697A75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107336.404:7348): pid=43874 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107336.407:7349): pid=43874 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107336.587:7350): pid=43874 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107336.587:7351): pid=43874 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107336.591:7352): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107336.591:7353): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107337.154:7354): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107337.154:7355): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107337.205:7356): pid=43890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107337.205:7357): pid=43890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E756B676C6A6574757061706A77637179696B7673776F6C6B6B777175646D74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107337.205:7358): pid=43890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107337.207:7359): pid=43890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107337.461:7360): pid=43890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107337.461:7361): pid=43890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107337.465:7362): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107337.465:7363): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107337.942:7364): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107337.942:7365): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107337.995:7366): pid=43917 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107337.995:7367): pid=43917 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73646A6769627669646173667167676770757271746E6A736C7766616E636D73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107337.996:7368): pid=43917 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107338.000:7369): pid=43917 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107338.566:7370): prog-id=340 op=LOAD type=SYSCALL msg=audit(1770107338.566:7370): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd6d44bf00 a2=90 a3=9500000000 items=0 ppid=44168 pid=44170 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107338.566:7370): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333265393662396665333237613034663937393239383537626331663132 type=BPF msg=audit(1770107338.565:7371): prog-id=341 op=LOAD type=SYSCALL msg=audit(1770107338.565:7371): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff9700a560 a2=90 a3=9500000000 items=0 ppid=44169 pid=44171 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107338.565:7371): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323363313738333839663037656130333237353761363462393838623964 type=BPF msg=audit(1770107338.592:7372): prog-id=342 op=LOAD type=SYSCALL msg=audit(1770107338.592:7372): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc53360a40 a2=90 a3=9500000000 items=0 ppid=44176 pid=44177 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107338.592:7372): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F326639373136633531313439646138633663613264393531396538353938 type=BPF msg=audit(1770107338.685:7373): prog-id=343 op=LOAD type=SYSCALL msg=audit(1770107338.685:7373): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffef224030 a2=90 a3=9500000000 items=0 ppid=44223 pid=44224 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107338.685:7373): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313833333431353937656665653438373232313832386563353234636134 type=BPF msg=audit(1770107338.687:7374): prog-id=344 op=LOAD type=SYSCALL msg=audit(1770107338.687:7374): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffffa25bb30 a2=90 a3=9500000000 items=0 ppid=44225 pid=44226 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107338.687:7374): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F626162303330326430313630333034613236323262326331643530353166 type=BPF msg=audit(1770107340.841:7375): prog-id=345 op=LOAD type=SYSCALL msg=audit(1770107340.841:7375): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc1a5b8b80 a2=90 a3=9500000000 items=0 ppid=44633 pid=44634 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107340.841:7375): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F656631353163616263313661303261613136343732353861393633386164 type=BPF msg=audit(1770107340.925:7376): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107341.264:7377): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107341.345:7378): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107341.414:7379): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107341.468:7380): prog-id=346 op=LOAD type=SYSCALL msg=audit(1770107341.468:7380): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff1a9dfb10 a2=90 a3=9500000000 items=0 ppid=44940 pid=44941 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107341.468:7380): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366236623933646139613138623064656462333431373934323937343166 type=BPF msg=audit(1770107341.892:7381): prog-id=347 op=LOAD type=SYSCALL msg=audit(1770107341.892:7381): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffeec6c62b0 a2=90 a3=9500000000 items=0 ppid=45142 pid=45143 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107341.892:7381): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366663656262616538306339373531343834303130303732353035336536 type=BPF msg=audit(1770107341.905:7382): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107342.001:7383): prog-id=348 op=LOAD type=SYSCALL msg=audit(1770107342.001:7383): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffebbf81760 a2=90 a3=9500000000 items=0 ppid=45191 pid=45192 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107342.001:7383): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F316665366136626231313261646564626132313831333334343233653238 type=BPF msg=audit(1770107342.237:7384): prog-id=349 op=LOAD type=SYSCALL msg=audit(1770107342.237:7384): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff6be301f0 a2=90 a3=9500000000 items=0 ppid=45266 pid=45267 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107342.237:7384): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393331376635376536306135356530663136396137666531323764646631 type=BPF msg=audit(1770107342.454:7385): prog-id=350 op=LOAD type=SYSCALL msg=audit(1770107342.454:7385): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc624931a0 a2=90 a3=9500000000 items=0 ppid=45320 pid=45321 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107342.454:7385): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383566646634626231373766313836353362313033363565346333646166 type=BPF msg=audit(1770107344.028:7386): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107344.242:7387): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107344.688:7388): prog-id=351 op=LOAD type=SYSCALL msg=audit(1770107344.688:7388): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd0c8e2600 a2=90 a3=9500000000 items=0 ppid=45971 pid=45972 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107344.688:7388): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F356466346462666537613132396138396562636565373435383061303462 type=BPF msg=audit(1770107344.823:7389): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107345.307:7390): prog-id=352 op=LOAD type=SYSCALL msg=audit(1770107345.307:7390): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd1bd9bfe0 a2=90 a3=9500000000 items=0 ppid=46096 pid=46097 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107345.307:7390): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613338346431323030613235653336643731666131313166383463353635 type=BPF msg=audit(1770107347.559:7391): prog-id=353 op=LOAD type=SYSCALL msg=audit(1770107347.559:7391): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe573b24e0 a2=90 a3=9500000000 items=0 ppid=46397 pid=46398 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107347.559:7391): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613336366537303861613432613830633461636336333236363433313032 type=BPF msg=audit(1770107347.643:7392): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107348.244:7393): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107348.466:7394): prog-id=354 op=LOAD type=SYSCALL msg=audit(1770107348.466:7394): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff71d51d30 a2=90 a3=9500000000 items=0 ppid=46647 pid=46648 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107348.466:7394): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616463666236643166663636326539303034326462363131383264643761 type=BPF msg=audit(1770107349.902:7395): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107349.915:7396): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107350.067:7397): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107350.963:7398): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107351.456:7399): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107351.736:7400): pid=43917 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107351.736:7401): pid=43917 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107351.741:7402): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107351.741:7403): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107352.330:7404): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107352.330:7405): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107352.374:7406): pid=47234 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107352.374:7407): pid=47234 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777578706C6179666565626A747779766C6178706D6462626B68756375747671203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107352.375:7408): pid=47234 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107352.378:7409): pid=47234 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107352.537:7410): pid=47234 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107352.538:7411): pid=47234 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107352.541:7412): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107352.541:7413): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107352.633:7414): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107352.633:7415): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107352.688:7416): pid=47250 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107352.689:7417): pid=47250 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6570737A7A6863797A6161616E69616F786A6274736C6E7A79747272657079203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107352.689:7418): pid=47250 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107352.692:7419): pid=47250 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107352.876:7420): pid=47250 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107352.877:7421): pid=47250 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107352.880:7422): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107352.880:7423): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107353.116:7424): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107353.116:7425): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107353.175:7426): pid=47266 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107353.175:7427): pid=47266 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D716B7776716B74716979706F6A626D7A6E6E63736B6D726C71666E73697871203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107353.176:7428): pid=47266 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107353.178:7429): pid=47266 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107353.366:7430): pid=47266 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107353.366:7431): pid=47266 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107353.370:7432): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107353.370:7433): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107353.565:7434): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107353.565:7435): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107353.594:7436): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107353.594:7437): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107353.619:7438): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107353.619:7439): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107353.648:7440): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107353.648:7441): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107353.676:7442): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107353.676:7443): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107353.732:7444): pid=47316 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107353.732:7445): pid=47316 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7873786474616E786575676C6269647168746F6B686D776C636F65747579746D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107353.733:7446): pid=47316 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107353.735:7447): pid=47316 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107353.907:7448): pid=47316 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107353.907:7449): pid=47316 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107353.911:7450): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107353.911:7451): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107353.939:7452): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107353.939:7453): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107353.975:7454): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107353.975:7455): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107354.002:7456): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107354.002:7457): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107354.031:7458): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107354.032:7459): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107354.057:7460): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107354.057:7461): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107354.117:7462): pid=47359 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107354.117:7463): pid=47359 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7769646D6661796C79757961686B6D696B6476747074656F71696A64666E6C63203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107354.118:7464): pid=47359 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107354.121:7465): pid=47359 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107354.307:7466): pid=47359 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107354.307:7467): pid=47359 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107354.311:7468): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107354.311:7469): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107354.335:7470): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107354.335:7471): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107354.368:7472): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107354.368:7473): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107354.461:7474): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107354.461:7475): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107354.492:7476): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107354.492:7477): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107354.515:7478): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107354.515:7479): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107354.553:7480): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107354.553:7481): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107354.580:7482): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107354.580:7483): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107354.645:7484): pid=47421 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107354.645:7485): pid=47421 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7568726A706E65786D6F766A736B6F77656D626D7471777661626B6B6D78716C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107354.646:7486): pid=47421 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107354.649:7487): pid=47421 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107354.802:7488): pid=47421 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107354.803:7489): pid=47421 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107354.806:7490): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107354.806:7491): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107354.831:7492): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107354.832:7493): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107354.868:7494): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107354.868:7495): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107354.885:7496): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107354.885:7497): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107354.916:7498): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107354.916:7499): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107354.931:7500): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107354.931:7501): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107354.990:7502): pid=47464 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107354.990:7503): pid=47464 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6D796A646F7A74766F61797472776362736D70796374616C7671776C69696C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107354.991:7504): pid=47464 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107354.993:7505): pid=47464 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107355.174:7506): pid=47464 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107355.174:7507): pid=47464 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107355.177:7508): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107355.178:7509): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107355.197:7510): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107355.197:7511): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107355.225:7512): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107355.226:7513): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107355.341:7514): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107355.342:7515): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107355.372:7516): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107355.372:7517): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107355.393:7518): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107355.393:7519): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107355.427:7520): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107355.428:7521): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107355.451:7522): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107355.451:7523): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107355.503:7524): pid=47526 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107355.503:7525): pid=47526 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726169776A79756366616A6E78706A6166777569716877796267736268787362203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107355.504:7526): pid=47526 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107355.507:7527): pid=47526 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107355.671:7528): pid=47526 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107355.672:7529): pid=47526 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107355.676:7530): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107355.676:7531): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107355.706:7532): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107355.706:7533): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107355.744:7534): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107355.744:7535): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107355.767:7536): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107355.767:7537): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107355.799:7538): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107355.799:7539): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107355.824:7540): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107355.824:7541): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107355.886:7542): pid=47569 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107355.886:7543): pid=47569 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A63656C6275796C716368686F736B7A696A79756B6C63796B666D6F77747563203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107355.887:7544): pid=47569 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107355.889:7545): pid=47569 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107356.024:7546): pid=47569 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107356.024:7547): pid=47569 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107356.027:7548): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107356.027:7549): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107356.047:7550): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107356.047:7551): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107356.072:7552): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107356.072:7553): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107356.186:7554): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107356.187:7555): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107356.217:7556): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107356.217:7557): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107356.235:7558): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107356.235:7559): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107356.267:7560): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107356.267:7561): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107356.289:7562): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107356.289:7563): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107356.341:7564): pid=47631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107356.341:7565): pid=47631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E776873656765736F7769766861757071696B7A696E746B6377716E75697062203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107356.342:7566): pid=47631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107356.344:7567): pid=47631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107356.487:7568): pid=47631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107356.487:7569): pid=47631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107356.491:7570): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107356.491:7571): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107356.514:7572): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107356.515:7573): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107356.547:7574): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107356.547:7575): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107356.570:7576): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107356.570:7577): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107356.599:7578): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107356.599:7579): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107356.627:7580): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107356.628:7581): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107356.687:7582): pid=47674 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107356.688:7583): pid=47674 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61656C6A7271647665636364697A6863706B70646D70696A6B69686876707265203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107356.688:7584): pid=47674 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107356.691:7585): pid=47674 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107356.868:7586): pid=47674 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107356.869:7587): pid=47674 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107356.872:7588): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107356.872:7589): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107356.896:7590): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107356.897:7591): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107356.929:7592): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107356.929:7593): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107357.007:7594): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107357.007:7595): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107357.065:7596): pid=47704 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107357.066:7597): pid=47704 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616C7A7A7A7376796F616C6F6F6C6169717778726477617A6274706C6572676D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107357.066:7598): pid=47704 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107357.069:7599): pid=47704 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107357.568:7600): prog-id=355 op=LOAD type=BPF msg=audit(1770107357.568:7601): prog-id=356 op=LOAD type=BPF msg=audit(1770107357.568:7602): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107357.568:7603): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107357.569:7604): prog-id=357 op=LOAD type=BPF msg=audit(1770107357.569:7605): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107357.570:7606): prog-id=358 op=LOAD type=BPF msg=audit(1770107357.570:7607): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107357.570:7608): prog-id=359 op=LOAD type=BPF msg=audit(1770107357.570:7609): prog-id=360 op=LOAD type=BPF msg=audit(1770107357.570:7610): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107357.570:7611): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107357.572:7612): prog-id=361 op=LOAD type=BPF msg=audit(1770107357.572:7613): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107357.572:7614): prog-id=362 op=LOAD type=BPF msg=audit(1770107357.572:7615): prog-id=363 op=LOAD type=BPF msg=audit(1770107357.572:7616): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107357.572:7617): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107357.574:7618): prog-id=364 op=LOAD type=BPF msg=audit(1770107357.574:7619): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107357.810:7620): prog-id=365 op=LOAD type=BPF msg=audit(1770107357.810:7621): prog-id=366 op=LOAD type=BPF msg=audit(1770107357.810:7622): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107357.810:7623): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107357.811:7624): prog-id=367 op=LOAD type=BPF msg=audit(1770107357.811:7625): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107357.812:7626): prog-id=368 op=LOAD type=BPF msg=audit(1770107357.812:7627): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107357.812:7628): prog-id=369 op=LOAD type=BPF msg=audit(1770107357.812:7629): prog-id=370 op=LOAD type=BPF msg=audit(1770107357.812:7630): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107357.812:7631): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107357.814:7632): prog-id=371 op=LOAD type=BPF msg=audit(1770107357.814:7633): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107357.814:7634): prog-id=372 op=LOAD type=BPF msg=audit(1770107357.814:7635): prog-id=373 op=LOAD type=BPF msg=audit(1770107357.814:7636): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107357.814:7637): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107357.816:7638): prog-id=374 op=LOAD type=BPF msg=audit(1770107357.816:7639): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107357.842:7640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo-container-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107357.878:7641): pid=47704 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107357.879:7642): pid=47704 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107357.883:7643): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107357.883:7644): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107358.001:7645): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107358.001:7646): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107358.032:7647): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107358.032:7648): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107358.054:7649): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107358.054:7650): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107358.089:7651): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107358.089:7652): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107358.114:7653): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107358.114:7654): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107358.173:7655): pid=47829 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107358.173:7656): pid=47829 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B787865737A77636665756F7A706E6F617574637868736F64756B6A6A616164203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107358.174:7657): pid=47829 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107358.179:7658): pid=47829 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107358.374:7659): pid=47829 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107358.374:7660): pid=47829 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107358.378:7661): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107358.378:7662): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107358.411:7663): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107358.411:7664): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107358.451:7665): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107358.451:7666): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107358.479:7667): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107358.479:7668): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107358.513:7669): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107358.513:7670): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107358.550:7671): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107358.550:7672): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107358.593:7673): pid=47872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107358.593:7674): pid=47872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7364786F767A6E7878786E6979787A716974626D627365727A6E7174657164203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107358.593:7675): pid=47872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107358.595:7676): pid=47872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107358.778:7677): pid=47872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107358.778:7678): pid=47872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107358.782:7679): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107358.782:7680): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107358.803:7681): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107358.804:7682): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107358.833:7683): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107358.833:7684): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107358.928:7685): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107358.928:7686): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107358.962:7687): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107358.962:7688): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107358.981:7689): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107358.981:7690): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107359.018:7691): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107359.018:7692): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107359.042:7693): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107359.042:7694): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107359.101:7695): pid=47934 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107359.102:7696): pid=47934 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7167747A746B6572706C627961726768677270706C62756D736D67626C726E7A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107359.102:7697): pid=47934 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107359.105:7698): pid=47934 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107359.278:7699): pid=47934 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107359.278:7700): pid=47934 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107359.281:7701): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107359.282:7702): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107359.308:7703): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107359.308:7704): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107359.345:7705): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107359.345:7706): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107359.367:7707): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107359.367:7708): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107359.398:7709): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107359.398:7710): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107359.419:7711): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107359.419:7712): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107359.479:7713): pid=47977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107359.479:7714): pid=47977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637675746E657672616D65666F6B75786C71687776647A767677776D6C766D77203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107359.480:7715): pid=47977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107359.482:7716): pid=47977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107359.667:7717): pid=47977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107359.668:7718): pid=47977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107359.672:7719): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107359.672:7720): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107359.692:7721): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107359.692:7722): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107359.725:7723): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107359.725:7724): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107359.822:7725): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107359.822:7726): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107359.893:7727): pid=48007 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107359.893:7728): pid=48007 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6B77706D6169726F6B7569636F76706E61666470776864676F6E62646B7678203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107359.894:7729): pid=48007 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107359.896:7730): pid=48007 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107360.418:7731): prog-id=375 op=LOAD type=BPF msg=audit(1770107360.418:7732): prog-id=376 op=LOAD type=BPF msg=audit(1770107360.418:7733): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107360.418:7734): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107360.419:7735): prog-id=377 op=LOAD type=BPF msg=audit(1770107360.419:7736): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107360.420:7737): prog-id=378 op=LOAD type=BPF msg=audit(1770107360.420:7738): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107360.420:7739): prog-id=379 op=LOAD type=BPF msg=audit(1770107360.420:7740): prog-id=380 op=LOAD type=BPF msg=audit(1770107360.420:7741): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107360.420:7742): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107360.422:7743): prog-id=381 op=LOAD type=BPF msg=audit(1770107360.422:7744): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107360.422:7745): prog-id=382 op=LOAD type=BPF msg=audit(1770107360.422:7746): prog-id=383 op=LOAD type=BPF msg=audit(1770107360.422:7747): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107360.422:7748): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107360.424:7749): prog-id=384 op=LOAD type=BPF msg=audit(1770107360.424:7750): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107360.655:7751): prog-id=385 op=LOAD type=BPF msg=audit(1770107360.655:7752): prog-id=386 op=LOAD type=BPF msg=audit(1770107360.655:7753): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107360.655:7754): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107360.656:7755): prog-id=387 op=LOAD type=BPF msg=audit(1770107360.656:7756): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107360.658:7757): prog-id=388 op=LOAD type=BPF msg=audit(1770107360.658:7758): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107360.658:7759): prog-id=389 op=LOAD type=BPF msg=audit(1770107360.658:7760): prog-id=390 op=LOAD type=BPF msg=audit(1770107360.658:7761): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107360.658:7762): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107360.660:7763): prog-id=391 op=LOAD type=BPF msg=audit(1770107360.660:7764): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107360.660:7765): prog-id=392 op=LOAD type=BPF msg=audit(1770107360.660:7766): prog-id=393 op=LOAD type=BPF msg=audit(1770107360.660:7767): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107360.660:7768): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107360.662:7769): prog-id=394 op=LOAD type=BPF msg=audit(1770107360.662:7770): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107360.703:7771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107360.703:7772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107360.731:7773): pid=48007 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107360.732:7774): pid=48007 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107360.735:7775): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107360.735:7776): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107360.965:7777): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107360.965:7778): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107361.028:7779): pid=48100 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107361.028:7780): pid=48100 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726B6169627966686D6F666C6B756C626371627864627366726E747066696A75203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107361.029:7781): pid=48100 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107361.033:7782): pid=48100 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107361.235:7783): pid=48100 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107361.235:7784): pid=48100 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107361.239:7785): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107361.239:7786): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107361.454:7787): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107361.454:7788): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107361.505:7789): pid=48116 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107361.507:7790): pid=48116 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7574786D6C626678686579776F6D676C6162697676627A687A76676E627A656E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107361.507:7791): pid=48116 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107361.510:7792): pid=48116 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107361.944:7793): pid=48116 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107361.945:7794): pid=48116 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107361.948:7795): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107361.948:7796): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107362.519:7797): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107362.519:7798): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107362.568:7799): pid=48158 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107362.568:7800): pid=48158 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E796C7078716D63707561767574696B616A6B70787874787A776E7361757178203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107362.569:7801): pid=48158 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107362.572:7802): pid=48158 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107363.110:7803): prog-id=395 op=LOAD type=SYSCALL msg=audit(1770107363.110:7803): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd43a688e0 a2=90 a3=9500000000 items=0 ppid=48309 pid=48310 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107363.110:7803): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333866613764343062393338303263633561366231623631313139383963 type=BPF msg=audit(1770107363.151:7804): prog-id=396 op=LOAD type=SYSCALL msg=audit(1770107363.151:7804): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd5523a900 a2=90 a3=9500000000 items=0 ppid=48313 pid=48314 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107363.151:7804): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366330626136366534386362343533396436346337373136326533376166 type=BPF msg=audit(1770107363.184:7805): prog-id=397 op=LOAD type=SYSCALL msg=audit(1770107363.184:7805): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc0bf17800 a2=90 a3=9500000000 items=0 ppid=48317 pid=48318 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107363.184:7805): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616365343363663733663736626236653632386364366530383131626661 type=BPF msg=audit(1770107363.191:7806): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107363.196:7807): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107363.390:7808): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107363.831:7809): prog-id=398 op=LOAD type=SYSCALL msg=audit(1770107363.831:7809): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd40eeb000 a2=90 a3=9500000000 items=0 ppid=48538 pid=48540 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107363.831:7809): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F666666386364666533626436333037383766376237633566343264313233 type=BPF msg=audit(1770107363.836:7810): prog-id=399 op=LOAD type=SYSCALL msg=audit(1770107363.836:7810): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffec0015820 a2=90 a3=9500000000 items=0 ppid=48542 pid=48543 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107363.836:7810): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F326362656166616264656635363961636463623733396436386431633137 type=SERVICE_START msg=audit(1770107363.954:7811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107364.236:7812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107369.818:7813): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107370.067:7814): pid=48158 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107370.067:7815): pid=48158 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107370.072:7816): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107370.072:7817): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107370.238:7818): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107370.238:7819): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107370.296:7820): pid=49381 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107370.296:7821): pid=49381 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676568626D77746C656764666E6768756E776F62717769636C766E727773726E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107370.297:7822): pid=49381 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107370.300:7823): pid=49381 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107370.477:7824): pid=49381 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107370.477:7825): pid=49381 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107370.481:7826): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107370.481:7827): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107370.509:7828): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107370.509:7829): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107370.561:7830): pid=49397 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107370.561:7831): pid=49397 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647269706C7873676D626E786C756D7766636F737977696F656A6773786B7966203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107370.562:7832): pid=49397 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107370.564:7833): pid=49397 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107370.722:7834): pid=49397 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107370.722:7835): pid=49397 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107370.726:7836): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107370.726:7837): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107370.748:7838): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107370.748:7839): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107370.775:7840): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107370.775:7841): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107370.803:7842): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107370.803:7843): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107370.838:7844): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107370.838:7845): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107371.032:7846): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107371.032:7847): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107371.070:7848): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107371.070:7849): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107371.091:7850): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107371.091:7851): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107371.148:7852): pid=49458 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107371.148:7853): pid=49458 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686267726E616171756E65637A627A71677962717672726964676D7A6E637879203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107371.149:7854): pid=49458 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107371.151:7855): pid=49458 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107371.334:7856): pid=49458 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107371.334:7857): pid=49458 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107371.339:7858): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107371.340:7859): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107371.368:7860): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107371.368:7861): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107371.419:7862): pid=49474 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107371.419:7863): pid=49474 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7875627473796563707A7A7175656173616E746F6D7861777862786F6F686376203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107371.419:7864): pid=49474 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107371.422:7865): pid=49474 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107371.889:7866): prog-id=400 op=LOAD type=BPF msg=audit(1770107371.889:7867): prog-id=401 op=LOAD type=BPF msg=audit(1770107371.889:7868): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107371.889:7869): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107371.890:7870): prog-id=402 op=LOAD type=BPF msg=audit(1770107371.890:7871): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107371.901:7872): prog-id=403 op=LOAD type=BPF msg=audit(1770107371.901:7873): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107371.901:7874): prog-id=404 op=LOAD type=BPF msg=audit(1770107371.901:7875): prog-id=405 op=LOAD type=BPF msg=audit(1770107371.901:7876): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107371.901:7877): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107371.903:7878): prog-id=406 op=LOAD type=BPF msg=audit(1770107371.903:7879): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107371.903:7880): prog-id=407 op=LOAD type=BPF msg=audit(1770107371.903:7881): prog-id=408 op=LOAD type=BPF msg=audit(1770107371.903:7882): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107371.903:7883): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107371.905:7884): prog-id=409 op=LOAD type=BPF msg=audit(1770107371.905:7885): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107371.926:7886): pid=49474 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107371.927:7887): pid=49474 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107371.931:7888): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107371.932:7889): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107372.173:7890): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107372.173:7891): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107372.238:7892): pid=49526 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107372.239:7893): pid=49526 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D776279657975676C797068776E64726973727564737975796D726976786568203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107372.239:7894): pid=49526 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107372.244:7895): pid=49526 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107372.804:7896): prog-id=410 op=LOAD type=BPF msg=audit(1770107372.805:7897): prog-id=411 op=LOAD type=BPF msg=audit(1770107372.805:7898): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107372.805:7899): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107372.805:7900): prog-id=412 op=LOAD type=BPF msg=audit(1770107372.805:7901): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107372.817:7902): prog-id=413 op=LOAD type=BPF msg=audit(1770107372.817:7903): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107372.817:7904): prog-id=414 op=LOAD type=BPF msg=audit(1770107372.817:7905): prog-id=415 op=LOAD type=BPF msg=audit(1770107372.817:7906): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107372.817:7907): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107372.819:7908): prog-id=416 op=LOAD type=BPF msg=audit(1770107372.819:7909): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107372.819:7910): prog-id=417 op=LOAD type=BPF msg=audit(1770107372.819:7911): prog-id=418 op=LOAD type=BPF msg=audit(1770107372.819:7912): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107372.819:7913): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107372.821:7914): prog-id=419 op=LOAD type=BPF msg=audit(1770107372.821:7915): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107372.915:7916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_metrics_qdr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107372.936:7917): pid=49526 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107372.936:7918): pid=49526 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107372.940:7919): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107372.940:7920): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107372.980:7921): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107372.980:7922): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107373.012:7923): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107373.013:7924): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107373.141:7925): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107373.141:7926): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107373.208:7927): pid=49606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107373.208:7928): pid=49606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7063787A7A68787767636879677A696C6B6268727A6B656A7A75646865616F61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107373.209:7929): pid=49606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107373.214:7930): pid=49606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107373.359:7931): pid=49606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107373.359:7932): pid=49606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107373.363:7933): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107373.363:7934): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107373.665:7935): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107373.665:7936): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107373.694:7937): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107373.694:7938): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107373.715:7939): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107373.715:7940): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107373.748:7941): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107373.749:7942): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107373.772:7943): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107373.772:7944): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107373.833:7945): pid=49654 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107373.833:7946): pid=49654 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69726664656C73726A686A6B6F64626C7372796E797373786C68756975657569203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107373.834:7947): pid=49654 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107373.836:7948): pid=49654 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107373.997:7949): pid=49654 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107373.997:7950): pid=49654 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107374.001:7951): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107374.001:7952): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107374.024:7953): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107374.024:7954): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107374.060:7955): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107374.060:7956): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107374.087:7957): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107374.087:7958): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107374.117:7959): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107374.117:7960): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107374.146:7961): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107374.146:7962): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107374.209:7963): pid=49697 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107374.209:7964): pid=49697 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78686A786571736B696E6C6A6576787A6767676D73796470737161626C647864203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107374.210:7965): pid=49697 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107374.212:7966): pid=49697 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107374.399:7967): pid=49697 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107374.399:7968): pid=49697 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107374.403:7969): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107374.403:7970): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107374.426:7971): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107374.426:7972): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107374.448:7973): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107374.449:7974): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107374.567:7975): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107374.567:7976): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107374.630:7977): pid=49727 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107374.630:7978): pid=49727 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61716274647374676F68796B7679656B6B6272666E69707169726B6E6C717275203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107374.630:7979): pid=49727 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107374.632:7980): pid=49727 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107374.835:7981): pid=49727 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107374.836:7982): pid=49727 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107374.840:7983): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107374.840:7984): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107375.088:7985): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107375.088:7986): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107375.148:7987): pid=49743 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107375.148:7988): pid=49743 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6476786A6C71686E62686B71706570637869676179796B7A73776B6579706868203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107375.149:7989): pid=49743 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107375.151:7990): pid=49743 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107375.333:7991): pid=49743 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107375.333:7992): pid=49743 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107375.337:7993): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107375.338:7994): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107375.453:7995): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107375.453:7996): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107375.502:7997): pid=49759 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107375.502:7998): pid=49759 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7361756B7A786A61626769797773626B70777073617A717A666163616E64716A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107375.503:7999): pid=49759 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107375.505:8000): pid=49759 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107375.674:8001): pid=49759 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107375.674:8002): pid=49759 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107375.677:8003): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107375.677:8004): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107376.292:8005): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107376.293:8006): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107376.321:8007): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107376.321:8008): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107376.343:8009): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107376.343:8010): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107376.375:8011): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107376.375:8012): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107376.400:8013): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107376.400:8014): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107376.448:8015): pid=49807 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107376.448:8016): pid=49807 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6162616B61796E627A76796B6A6E6C69716D6B67617961676166686674756A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107376.449:8017): pid=49807 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107376.452:8018): pid=49807 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107376.638:8019): pid=49807 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107376.638:8020): pid=49807 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107376.642:8021): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107376.642:8022): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107376.664:8023): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107376.664:8024): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107376.692:8025): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107376.692:8026): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107376.719:8027): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107376.719:8028): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107376.740:8029): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107376.740:8030): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107376.763:8031): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107376.763:8032): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107376.804:8033): pid=49852 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107376.805:8034): pid=49852 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7968696C6D7A636D706A6E667573706D6966796A766479716263677763636463203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107376.805:8035): pid=49852 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107376.808:8036): pid=49852 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107376.940:8037): pid=49852 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107376.941:8038): pid=49852 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107376.944:8039): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107376.944:8040): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107376.964:8041): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107376.964:8042): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107376.993:8043): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107376.993:8044): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107377.371:8045): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107377.371:8046): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107377.423:8047): pid=49882 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107377.424:8048): pid=49882 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666F756A6A626A706F7064657A7A6966797A7472746272647075776F786A6A76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107377.424:8049): pid=49882 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107377.426:8050): pid=49882 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107378.075:8051): pid=49882 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107378.076:8052): pid=49882 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107378.079:8053): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107378.079:8054): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107378.228:8055): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107378.228:8056): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107378.285:8057): pid=49900 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107378.285:8058): pid=49900 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62736C747862666B766B786E70696668616A6F726A69796D6177617779736C62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107378.286:8059): pid=49900 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107378.287:8060): pid=49900 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107395.139:8061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107395.447:8062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107426.145:8063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107426.455:8064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107433.120:8065): pid=51297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=51297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107433.386:8066): pid=51296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=51297 suid=74 rport=45732 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107433.387:8067): pid=51296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=51297 suid=74 rport=45732 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107435.757:8068): pid=51296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=51297 suid=74 rport=45732 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107435.758:8069): pid=51296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=51297 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107435.759:8070): pid=51296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107435.759:8071): pid=51296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=51296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107435.759:8072): pid=51296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107443.570:8073): pid=51696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=51696 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107443.827:8074): pid=51695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=51696 suid=74 rport=40480 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.42.57.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107443.827:8075): pid=51695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=51696 suid=74 rport=40480 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.42.57.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107445.596:8076): pid=51695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=51696 suid=74 rport=40480 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.42.57.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107445.596:8077): pid=51695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=51696 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107445.597:8078): pid=51695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.42.57.149 addr=103.42.57.149 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107445.598:8079): pid=51695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=51695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107445.598:8080): pid=51695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.42.57.149 terminal=ssh res=failed'UID="root" AUID="unset" type=BPF msg=audit(1770107450.867:8081): prog-id=420 op=LOAD type=SYSCALL msg=audit(1770107450.867:8081): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffea5b2ec70 a2=90 a3=9500000000 items=0 ppid=51916 pid=51917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107450.867:8081): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333530386236636130356363643435653064386532333231616130313165 type=BPF msg=audit(1770107451.237:8082): prog-id=421 op=LOAD type=BPF msg=audit(1770107451.237:8083): prog-id=422 op=LOAD type=BPF msg=audit(1770107451.237:8084): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107451.237:8085): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107451.238:8086): prog-id=423 op=LOAD type=BPF msg=audit(1770107451.238:8087): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107451.252:8088): prog-id=424 op=LOAD type=BPF msg=audit(1770107451.252:8089): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107451.252:8090): prog-id=425 op=LOAD type=BPF msg=audit(1770107451.252:8091): prog-id=426 op=LOAD type=BPF msg=audit(1770107451.252:8092): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107451.252:8093): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107451.254:8094): prog-id=427 op=LOAD type=BPF msg=audit(1770107451.254:8095): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107451.254:8096): prog-id=428 op=LOAD type=BPF msg=audit(1770107451.254:8097): prog-id=429 op=LOAD type=BPF msg=audit(1770107451.254:8098): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107451.254:8099): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107451.256:8100): prog-id=430 op=LOAD type=BPF msg=audit(1770107451.256:8101): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107457.147:8102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107458.525:8103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107465.302:8104): pid=52545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=52545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107465.658:8105): pid=52542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=52545 suid=74 rport=53268 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107465.658:8106): pid=52542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=52545 suid=74 rport=53268 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107466.235:8107): pid=52551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=52551 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770107468.275:8108): pid=52542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=52545 suid=74 rport=53268 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107468.276:8109): pid=52542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=52545 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107468.277:8110): pid=52542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107468.278:8111): pid=52542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=52542 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107468.278:8112): pid=52542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770107468.384:8113): pid=52550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=52551 suid=74 rport=58568 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107468.385:8114): pid=52550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=52551 suid=74 rport=58568 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107474.133:8115): pid=52550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=52551 suid=74 rport=58568 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107474.133:8116): pid=52550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=52551 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107474.134:8117): pid=52550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107474.134:8118): pid=52550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=52550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107474.134:8119): pid=52550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1770107482.000:8120): pid=49900 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107482.001:8121): pid=49900 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107482.004:8122): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107482.004:8123): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107482.135:8124): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107482.135:8125): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107482.190:8126): pid=53075 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107482.190:8127): pid=53075 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756B68667364666B746D64656F6C6E6A796671697779636E6F6C696B75646277203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107482.191:8128): pid=53075 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107482.196:8129): pid=53075 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107482.380:8130): pid=53075 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107482.381:8131): pid=53075 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107482.385:8132): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107482.385:8133): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107482.639:8134): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107482.639:8135): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107482.699:8136): pid=53093 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107482.699:8137): pid=53093 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62716474777A61656A61636F716D6F767468676171766E7175796865646E6361203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107482.699:8138): pid=53093 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107482.702:8139): pid=53093 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107483.032:8140): pid=53093 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107483.032:8141): pid=53093 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107483.036:8142): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107483.036:8143): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107483.135:8144): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107483.135:8145): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107483.197:8146): pid=53114 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107483.197:8147): pid=53114 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747972726D786F786D6B777767616C7964677A74786A766866627069776E6263203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107483.198:8148): pid=53114 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107483.201:8149): pid=53114 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107483.374:8150): pid=53114 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107483.375:8151): pid=53114 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107483.379:8152): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107483.379:8153): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107483.958:8154): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107483.959:8155): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107484.019:8156): pid=53130 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107484.019:8157): pid=53130 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A667A6D6A6C69626B706866716D72716362726B796B626F636566716C616165203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107484.020:8158): pid=53130 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107484.022:8159): pid=53130 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107484.668:8160): pid=53130 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107484.669:8161): pid=53130 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107484.671:8162): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107484.671:8163): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107484.806:8164): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107484.806:8165): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107484.853:8166): pid=53148 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107484.853:8167): pid=53148 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696363747A66637764636F627062746A7472727A7475666F6B6B68736F69756C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107484.854:8168): pid=53148 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107484.856:8169): pid=53148 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1770107486.167:8170): pid=53167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=53167 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107486.374:8171): pid=53165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=53167 suid=74 rport=32932 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107486.374:8172): pid=53165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=53167 suid=74 rport=32932 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770107489.144:8173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107489.471:8174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107493.805:8175): pid=53165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=53167 suid=74 rport=32932 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107493.805:8176): pid=53165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=53167 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107493.806:8177): pid=53165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107493.806:8178): pid=53165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=53165 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107493.806:8179): pid=53165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=BPF msg=audit(1770107505.304:8180): prog-id=431 op=LOAD type=SYSCALL msg=audit(1770107505.304:8180): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdbd00c120 a2=90 a3=9500000000 items=0 ppid=53901 pid=53902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107505.304:8180): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373136616134383936333336346364313430656133343664323263363063 type=BPF msg=audit(1770107505.658:8181): prog-id=432 op=LOAD type=BPF msg=audit(1770107505.658:8182): prog-id=433 op=LOAD type=BPF msg=audit(1770107505.658:8183): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107505.658:8184): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107505.659:8185): prog-id=434 op=LOAD type=BPF msg=audit(1770107505.659:8186): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107505.672:8187): prog-id=435 op=LOAD type=BPF msg=audit(1770107505.672:8188): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107505.672:8189): prog-id=436 op=LOAD type=BPF msg=audit(1770107505.672:8190): prog-id=437 op=LOAD type=BPF msg=audit(1770107505.672:8191): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107505.672:8192): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107505.674:8193): prog-id=438 op=LOAD type=BPF msg=audit(1770107505.674:8194): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107505.674:8195): prog-id=439 op=LOAD type=BPF msg=audit(1770107505.674:8196): prog-id=440 op=LOAD type=BPF msg=audit(1770107505.674:8197): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107505.674:8198): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107505.676:8199): prog-id=441 op=LOAD type=BPF msg=audit(1770107505.676:8200): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107510.086:8201): pid=53148 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107510.086:8202): pid=53148 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107510.089:8203): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107510.089:8204): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=BPF msg=audit(1770107510.144:8205): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1770107510.218:8206): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107510.218:8207): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107510.265:8208): pid=54227 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107510.265:8209): pid=54227 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6666777363747867726A746B706F65706776697973776A6D6B6F77616C6B7771203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107510.266:8210): pid=54227 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107510.271:8211): pid=54227 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107510.474:8212): pid=54227 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107510.475:8213): pid=54227 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107510.477:8214): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107510.477:8215): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=BPF msg=audit(1770107510.593:8216): prog-id=442 op=LOAD type=SYSCALL msg=audit(1770107510.593:8216): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd8e88aeb0 a2=90 a3=9500000000 items=0 ppid=54314 pid=54315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107510.593:8216): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623732373037633038363233616434616234336431316135613031633065 type=USER_LOGIN msg=audit(1770107510.613:8217): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107510.613:8218): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107510.679:8219): pid=54360 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107510.679:8220): pid=54360 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687365766A6F6777747275616B686D7578676572676E6773676371756F6D6D6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107510.680:8221): pid=54360 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107510.682:8222): pid=54360 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107510.966:8223): prog-id=443 op=LOAD type=BPF msg=audit(1770107510.966:8224): prog-id=444 op=LOAD type=BPF msg=audit(1770107510.966:8225): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107510.966:8226): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107510.967:8227): prog-id=445 op=LOAD type=BPF msg=audit(1770107510.967:8228): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107510.980:8229): prog-id=446 op=LOAD type=BPF msg=audit(1770107510.980:8230): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107510.980:8231): prog-id=447 op=LOAD type=BPF msg=audit(1770107510.980:8232): prog-id=448 op=LOAD type=BPF msg=audit(1770107510.980:8233): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107510.980:8234): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107510.982:8235): prog-id=449 op=LOAD type=BPF msg=audit(1770107510.982:8236): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107510.982:8237): prog-id=450 op=LOAD type=BPF msg=audit(1770107510.982:8238): prog-id=451 op=LOAD type=BPF msg=audit(1770107510.982:8239): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107510.982:8240): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107510.984:8241): prog-id=452 op=LOAD type=BPF msg=audit(1770107510.984:8242): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107510.996:8243): pid=54360 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107510.997:8244): pid=54360 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107511.001:8245): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107511.001:8246): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107511.117:8247): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107511.117:8248): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107511.173:8249): pid=54537 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107511.174:8250): pid=54537 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656F76626C6576756A6862687473687A79696E71727A61646F75767977776376203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107511.175:8251): pid=54537 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107511.181:8252): pid=54537 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107511.337:8253): pid=54537 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107511.337:8254): pid=54537 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107511.340:8255): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107511.340:8256): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107511.727:8257): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107511.727:8258): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107511.759:8259): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107511.759:8260): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107511.777:8261): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107511.777:8262): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107511.812:8263): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107511.812:8264): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107511.838:8265): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107511.838:8266): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107511.895:8267): pid=54728 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107511.895:8268): pid=54728 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78767A6173706475717A6B776B6A7376736769707676706F68786C7976696B6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107511.896:8269): pid=54728 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107511.899:8270): pid=54728 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107512.061:8271): pid=54728 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107512.061:8272): pid=54728 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107512.064:8273): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107512.064:8274): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107512.098:8275): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107512.098:8276): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107512.127:8277): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107512.127:8278): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107512.151:8279): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107512.151:8280): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107512.174:8281): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107512.174:8282): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107512.197:8283): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107512.197:8284): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107512.240:8285): pid=54853 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107512.240:8286): pid=54853 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64727077756C796C626C787270766B636B6B6E66736672666368716676766873203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107512.241:8287): pid=54853 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107512.244:8288): pid=54853 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107512.442:8289): pid=54853 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107512.442:8290): pid=54853 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107512.445:8291): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107512.445:8292): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107512.471:8293): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107512.471:8294): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107512.496:8295): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107512.496:8296): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107512.767:8297): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107512.767:8298): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107512.826:8299): pid=54991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107512.827:8300): pid=54991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D616964647962697972716B6676767665756463706D696177616175786D7866203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107512.827:8301): pid=54991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107512.830:8302): pid=54991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107513.015:8303): pid=54991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107513.016:8304): pid=54991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107513.019:8305): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107513.019:8306): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107513.182:8307): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107513.182:8308): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107513.242:8309): pid=55069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107513.242:8310): pid=55069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7570627A6C6577696B71737A767476746A7265696A6266717A6466757966686A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107513.243:8311): pid=55069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107513.246:8312): pid=55069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107513.977:8313): pid=55069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107513.978:8314): pid=55069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107513.980:8315): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107513.980:8316): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107514.107:8317): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107514.107:8318): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107514.172:8319): pid=55395 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107514.172:8320): pid=55395 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64706F6C6975756E7A6D6B6963696D666D6C646C6E76716763686372677A6B66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107514.173:8321): pid=55395 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107514.175:8322): pid=55395 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1770107514.457:8323): pid=55434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=55434 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107514.759:8324): pid=55433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=55434 suid=74 rport=34884 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.231.189.155 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107514.759:8325): pid=55433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=55434 suid=74 rport=34884 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.231.189.155 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107518.861:8326): pid=55433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=55434 suid=74 rport=34884 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.231.189.155 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107518.862:8327): pid=55433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=55434 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107518.862:8328): pid=55433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.231.189.155 addr=171.231.189.155 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107518.863:8329): pid=55433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=55433 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107518.863:8330): pid=55433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.231.189.155 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107520.143:8331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107520.456:8332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107531.505:8333): pid=56734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=56734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107532.641:8334): pid=56710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=56734 suid=74 rport=47378 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107532.641:8335): pid=56710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=56734 suid=74 rport=47378 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=BPF msg=audit(1770107534.882:8336): prog-id=453 op=LOAD type=SYSCALL msg=audit(1770107534.882:8336): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe0d8d2d00 a2=90 a3=9500000000 items=0 ppid=56905 pid=56906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107534.882:8336): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663935633333326462333231626238346634653834663433373234663964 type=BPF msg=audit(1770107535.224:8337): prog-id=454 op=LOAD type=BPF msg=audit(1770107535.224:8338): prog-id=455 op=LOAD type=BPF msg=audit(1770107535.224:8339): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107535.224:8340): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107535.225:8341): prog-id=456 op=LOAD type=BPF msg=audit(1770107535.225:8342): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107535.235:8343): prog-id=457 op=LOAD type=BPF msg=audit(1770107535.235:8344): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107535.235:8345): prog-id=458 op=LOAD type=BPF msg=audit(1770107535.235:8346): prog-id=459 op=LOAD type=BPF msg=audit(1770107535.235:8347): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107535.235:8348): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107535.237:8349): prog-id=460 op=LOAD type=BPF msg=audit(1770107535.238:8350): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107535.238:8351): prog-id=461 op=LOAD type=BPF msg=audit(1770107535.238:8352): prog-id=462 op=LOAD type=BPF msg=audit(1770107535.238:8353): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107535.238:8354): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107535.240:8355): prog-id=463 op=LOAD type=BPF msg=audit(1770107535.240:8356): prog-id=0 op=UNLOAD type=CRYPTO_KEY_USER msg=audit(1770107537.064:8357): pid=56710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=56734 suid=74 rport=47378 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107537.065:8358): pid=56710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=56734 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107537.066:8359): pid=56710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107537.066:8360): pid=56710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=56710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107537.066:8361): pid=56710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1770107539.721:8362): pid=55395 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107539.722:8363): pid=55395 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107539.725:8364): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107539.725:8365): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=BPF msg=audit(1770107539.793:8366): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1770107539.864:8367): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107539.864:8368): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107539.921:8369): pid=57274 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107539.921:8370): pid=57274 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D797A66716767706F6D77786F6472797162656873616F7A66687771767874736A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107539.923:8371): pid=57274 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107539.927:8372): pid=57274 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107540.115:8373): pid=57274 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107540.115:8374): pid=57274 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107540.119:8375): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107540.119:8376): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107540.267:8377): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107540.267:8378): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107540.328:8379): pid=57385 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107540.328:8380): pid=57385 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717775676C676D6A78627873726B656A6367776363686A7A6B697A6376716D6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107540.329:8381): pid=57385 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107540.331:8382): pid=57385 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107540.383:8383): prog-id=464 op=LOAD type=SYSCALL msg=audit(1770107540.383:8383): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc10f57f30 a2=90 a3=9500000000 items=0 ppid=57389 pid=57390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107540.383:8383): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623365636663306333393862363237343564613137363935326137336331 type=USER_END msg=audit(1770107540.660:8384): pid=57385 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107540.661:8385): pid=57385 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107540.664:8386): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107540.664:8387): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107540.775:8388): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107540.775:8389): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=BPF msg=audit(1770107540.797:8390): prog-id=465 op=LOAD type=BPF msg=audit(1770107540.797:8391): prog-id=466 op=LOAD type=BPF msg=audit(1770107540.797:8392): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107540.797:8393): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107540.798:8394): prog-id=467 op=LOAD type=BPF msg=audit(1770107540.798:8395): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107540.799:8396): prog-id=468 op=LOAD type=BPF msg=audit(1770107540.799:8397): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107540.799:8398): prog-id=469 op=LOAD type=BPF msg=audit(1770107540.799:8399): prog-id=470 op=LOAD type=BPF msg=audit(1770107540.799:8400): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107540.799:8401): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107540.802:8402): prog-id=471 op=LOAD type=BPF msg=audit(1770107540.802:8403): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107540.802:8404): prog-id=472 op=LOAD type=BPF msg=audit(1770107540.802:8405): prog-id=473 op=LOAD type=BPF msg=audit(1770107540.802:8406): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107540.802:8407): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107540.804:8408): prog-id=474 op=LOAD type=BPF msg=audit(1770107540.804:8409): prog-id=0 op=UNLOAD type=USER_ACCT msg=audit(1770107540.842:8410): pid=57487 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107540.843:8411): pid=57487 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767365787377666365667669796273656B72627777657A6E626F617367757272203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107540.844:8412): pid=57487 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107540.848:8413): pid=57487 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107540.987:8414): pid=57487 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107540.987:8415): pid=57487 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107540.989:8416): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107540.989:8417): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107541.385:8418): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107541.385:8419): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107541.444:8420): pid=57682 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107541.445:8421): pid=57682 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D647865766269667664656B6F6D677978716671626E6B6967787A6C68716365203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107541.445:8422): pid=57682 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107541.449:8423): pid=57682 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107541.624:8424): pid=57682 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107541.624:8425): pid=57682 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107541.628:8426): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107541.628:8427): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107541.828:8428): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107541.828:8429): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107541.856:8430): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107541.856:8431): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107541.877:8432): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107541.877:8433): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107541.901:8434): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107541.901:8435): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107541.926:8436): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107541.926:8437): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107541.981:8438): pid=57773 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107541.981:8439): pid=57773 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E757367657464726B706870646373706E73777A75646C6A636F776B73617278203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107541.982:8440): pid=57773 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107541.984:8441): pid=57773 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107542.169:8442): pid=57773 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107542.169:8443): pid=57773 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107542.182:8444): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107542.182:8445): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107542.199:8446): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107542.199:8447): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107542.249:8448): pid=57884 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107542.249:8449): pid=57884 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666C6F7776686D656F746D626B7470656477616B70707774616B6D757A736A6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107542.250:8450): pid=57884 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107542.252:8451): pid=57884 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107542.425:8452): pid=57884 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107542.426:8453): pid=57884 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107542.429:8454): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107542.429:8455): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107542.446:8456): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107542.446:8457): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107542.467:8458): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107542.468:8459): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107542.548:8460): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107542.548:8461): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107542.579:8462): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107542.579:8463): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107542.596:8464): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107542.596:8465): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107542.627:8466): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107542.627:8467): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107542.651:8468): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107542.651:8469): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107542.681:8470): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107542.681:8471): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107542.706:8472): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107542.706:8473): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107542.737:8474): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107542.737:8475): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107542.756:8476): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107542.756:8477): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107542.782:8478): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107542.782:8479): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107542.803:8480): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107542.803:8481): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107542.850:8482): pid=58069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107542.850:8483): pid=58069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107542.851:8484): pid=58069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107542.852:8485): pid=58069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107543.020:8486): pid=58069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107543.020:8487): pid=58069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107543.023:8488): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107543.023:8489): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107543.114:8490): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107543.115:8491): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107543.176:8492): pid=58102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107543.177:8493): pid=58102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6F6C68707166786C746E676E7A796174626463757862777A786A6162657674203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107543.178:8494): pid=58102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107543.181:8495): pid=58102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107543.345:8496): pid=58102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107543.345:8497): pid=58102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107543.349:8498): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107543.349:8499): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1770107551.147:8500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107551.468:8501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107552.372:8502): pid=58943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=58943 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107553.416:8503): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107553.416:8504): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107553.478:8505): pid=59070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107553.479:8506): pid=59070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7569617A6762746261646C646E7570716776677873716D6962716A64726E6876203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107553.480:8507): pid=59070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107553.484:8508): pid=59070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107553.647:8509): pid=59070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107553.647:8510): pid=59070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107553.650:8511): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107553.650:8512): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1770107555.456:8513): pid=58256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=58256 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770107558.131:8514): pid=59427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=59427 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107558.416:8515): pid=59425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=59427 suid=74 rport=51194 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107558.416:8516): pid=59425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=59427 suid=74 rport=51194 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107561.888:8517): pid=59425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=59427 suid=74 rport=51194 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107561.888:8518): pid=59425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=59427 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107561.888:8519): pid=59425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107561.889:8520): pid=59425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=59425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107561.889:8521): pid=59425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107563.702:8522): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107563.702:8523): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107563.761:8524): pid=59648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107563.761:8525): pid=59648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6B7A68736B65616C727878626F71657A6D646F727A7A6778686773626C7768203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107563.762:8526): pid=59648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107563.767:8527): pid=59648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107563.913:8528): pid=59648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107563.914:8529): pid=59648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107563.917:8530): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107563.917:8531): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107564.323:8532): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107564.323:8533): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107564.380:8534): pid=59664 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107564.380:8535): pid=59664 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636C667277786F706165746B7969686B6F716D69636A6B716C67786B6D77646F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107564.381:8536): pid=59664 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107564.383:8537): pid=59664 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107564.589:8538): pid=59664 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107564.589:8539): pid=59664 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107564.593:8540): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107564.593:8541): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107564.695:8542): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107564.695:8543): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107564.745:8544): pid=59680 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107564.745:8545): pid=59680 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6277637A626568736C666E74796C64646F7876697379676662766971677877203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107564.746:8546): pid=59680 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107564.748:8547): pid=59680 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107564.926:8548): pid=59680 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107564.926:8549): pid=59680 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107564.930:8550): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107564.930:8551): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107565.091:8552): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107565.091:8553): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107565.112:8554): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107565.113:8555): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107565.130:8556): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107565.130:8557): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107565.150:8558): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107565.151:8559): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107565.171:8560): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107565.172:8561): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107565.208:8562): pid=59730 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107565.208:8563): pid=59730 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66676465787A6A7671626269647374656E7361756A75736F7279616D6E6E6173203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107565.208:8564): pid=59730 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107565.210:8565): pid=59730 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107565.374:8566): pid=59730 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107565.374:8567): pid=59730 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107565.377:8568): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107565.377:8569): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107565.398:8570): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107565.398:8571): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107565.452:8572): pid=59790 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107565.453:8573): pid=59790 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66786F66687568637575656A75776B6D717577796B6F767961646D6D6774707A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107565.453:8574): pid=59790 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107565.457:8575): pid=59790 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107565.636:8576): pid=59790 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107565.637:8577): pid=59790 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107565.641:8578): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107565.641:8579): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107565.667:8580): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107565.667:8581): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107565.704:8582): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107565.704:8583): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107565.790:8584): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107565.790:8585): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107565.856:8586): pid=59831 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107565.856:8587): pid=59831 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79756376616762726575676C616C61796C7663677866766E64756D776E6B696B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107565.857:8588): pid=59831 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107565.859:8589): pid=59831 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107566.041:8590): pid=59831 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107566.041:8591): pid=59831 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107566.045:8592): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107566.045:8593): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107566.173:8594): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107566.173:8595): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107566.235:8596): pid=59847 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107566.235:8597): pid=59847 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F687879626E6D666875777066666776706C6B776B6C6C716663776A6B786C70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107566.236:8598): pid=59847 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107566.239:8599): pid=59847 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107566.731:8600): pid=59847 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107566.732:8601): pid=59847 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107566.736:8602): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107566.736:8603): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107566.938:8604): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107566.938:8605): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107566.975:8606): pid=59999 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107566.975:8607): pid=59999 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6A77716F746D746F676F77667A67646178776277756A7A6670616767667A68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107566.976:8608): pid=59999 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107566.978:8609): pid=59999 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107567.169:8610): pid=59999 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107567.169:8611): pid=59999 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107567.174:8612): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107567.174:8613): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107567.523:8614): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107567.523:8615): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107567.561:8616): pid=60063 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107567.561:8617): pid=60063 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77626A62646C68767A7A7274776C72636E7368726D6C6C69766E766B65627178203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107567.562:8618): pid=60063 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107567.564:8619): pid=60063 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107567.716:8620): pid=60063 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107567.716:8621): pid=60063 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107567.720:8622): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107567.720:8623): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107567.834:8624): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107567.834:8625): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107567.874:8626): pid=60103 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107567.874:8627): pid=60103 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70656969686C6F6175676A6A6D6D77766F6E6973797A636E697A647469666C74203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107567.874:8628): pid=60103 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107567.876:8629): pid=60103 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107568.039:8630): pid=60103 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107568.039:8631): pid=60103 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107568.043:8632): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107568.043:8633): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107568.278:8634): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107568.278:8635): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107568.337:8636): pid=60151 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107568.338:8637): pid=60151 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63666269626F6A716476686E626A676F7875787869736978736E616577647479203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107568.338:8638): pid=60151 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107568.340:8639): pid=60151 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107568.513:8640): pid=60151 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107568.513:8641): pid=60151 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107568.516:8642): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107568.516:8643): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107568.723:8644): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107568.723:8645): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107568.740:8646): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107568.740:8647): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107568.784:8648): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107568.784:8649): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107568.805:8650): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107568.805:8651): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107568.828:8652): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107568.828:8653): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107568.869:8654): pid=60212 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107568.869:8655): pid=60212 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6374786E6B667A666C73616E78717A63746E736772766B6D617A616778717A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107568.870:8656): pid=60212 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107568.872:8657): pid=60212 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107569.014:8658): pid=60212 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107569.014:8659): pid=60212 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107569.018:8660): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107569.018:8661): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107569.040:8662): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107569.040:8663): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107569.097:8664): pid=60230 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107569.097:8665): pid=60230 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74656A6B766E787172686F627075627578616663646B73636964787277686B6D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107569.098:8666): pid=60230 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107569.100:8667): pid=60230 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107569.278:8668): pid=60230 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107569.279:8669): pid=60230 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107569.282:8670): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107569.282:8671): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107569.310:8672): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107569.310:8673): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107569.342:8674): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107569.342:8675): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107569.402:8676): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107569.402:8677): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107569.434:8678): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107569.434:8679): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107569.457:8680): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107569.457:8681): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107569.496:8682): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107569.496:8683): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107569.516:8684): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107569.516:8685): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107569.577:8686): pid=60294 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107569.578:8687): pid=60294 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6979726D696672777767656E67757763636E6C68726C676C7067677A72676271203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107569.578:8688): pid=60294 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107569.580:8689): pid=60294 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107569.783:8690): pid=60294 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107569.783:8691): pid=60294 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107569.790:8692): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107569.790:8693): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107569.818:8694): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107569.818:8695): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107569.877:8696): pid=60312 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107569.877:8697): pid=60312 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6F6E6A616672726C6A7072776564646D6871677663696A696566776E747462203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107569.877:8698): pid=60312 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107569.880:8699): pid=60312 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107570.064:8700): pid=60312 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107570.065:8701): pid=60312 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107570.069:8702): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107570.069:8703): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107570.090:8704): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107570.090:8705): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107570.118:8706): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107570.118:8707): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107570.229:8708): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107570.229:8709): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107570.259:8710): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107570.259:8711): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107570.284:8712): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107570.284:8713): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107570.320:8714): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107570.320:8715): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107570.349:8716): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107570.349:8717): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107570.408:8718): pid=60374 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107570.409:8719): pid=60374 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756D6E7575616C717565736B75657A627574766C756770786177686868697167203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107570.409:8720): pid=60374 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107570.412:8721): pid=60374 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107570.596:8722): pid=60374 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107570.597:8723): pid=60374 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107570.600:8724): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107570.600:8725): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107570.627:8726): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107570.627:8727): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107570.685:8728): pid=60392 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107570.685:8729): pid=60392 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75646D617A6F6766777371656B7268736D757A6D727875776E766D74766D737A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107570.686:8730): pid=60392 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107570.689:8731): pid=60392 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107570.858:8732): pid=60392 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107570.858:8733): pid=60392 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107570.862:8734): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107570.862:8735): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107570.884:8736): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107570.884:8737): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107570.915:8738): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107570.915:8739): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_SESSION msg=audit(1770107570.939:8740): pid=58940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=58943 suid=74 rport=46670 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107570.939:8741): pid=58940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=58943 suid=74 rport=46670 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1770107571.031:8742): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107571.031:8743): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107571.061:8744): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107571.061:8745): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107571.082:8746): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107571.082:8747): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107571.120:8748): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107571.120:8749): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107571.141:8750): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107571.141:8751): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107571.200:8752): pid=60529 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107571.200:8753): pid=60529 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D776C666D6E79616E77766D686B6E757A74776677687671777161696A746667203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107571.201:8754): pid=60529 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107571.205:8755): pid=60529 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107571.437:8756): pid=60529 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107571.438:8757): pid=60529 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107571.441:8758): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107571.441:8759): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107571.466:8760): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107571.466:8761): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107571.518:8762): pid=60554 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107571.519:8763): pid=60554 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77706F796471756D7676776D61756C737974787962626F677A7265616F717563203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107571.519:8764): pid=60554 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107571.521:8765): pid=60554 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107571.694:8766): pid=60554 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107571.694:8767): pid=60554 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107571.700:8768): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107571.700:8769): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107571.713:8770): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107571.713:8771): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107571.748:8772): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107571.748:8773): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107571.816:8774): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107571.816:8775): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107571.873:8776): pid=60625 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107571.874:8777): pid=60625 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6361616772677365716663636C6D72757A7062696C64736463726765777871203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107571.874:8778): pid=60625 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107571.876:8779): pid=60625 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107572.448:8780): prog-id=475 op=LOAD type=BPF msg=audit(1770107572.449:8781): prog-id=476 op=LOAD type=BPF msg=audit(1770107572.449:8782): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107572.449:8783): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107572.450:8784): prog-id=477 op=LOAD type=BPF msg=audit(1770107572.450:8785): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107572.451:8786): prog-id=478 op=LOAD type=BPF msg=audit(1770107572.451:8787): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107572.451:8788): prog-id=479 op=LOAD type=BPF msg=audit(1770107572.451:8789): prog-id=480 op=LOAD type=BPF msg=audit(1770107572.451:8790): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107572.451:8791): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107572.453:8792): prog-id=481 op=LOAD type=BPF msg=audit(1770107572.453:8793): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107572.453:8794): prog-id=482 op=LOAD type=BPF msg=audit(1770107572.453:8795): prog-id=483 op=LOAD type=BPF msg=audit(1770107572.453:8796): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107572.453:8797): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107572.455:8798): prog-id=484 op=LOAD type=BPF msg=audit(1770107572.456:8799): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107572.522:8800): pid=60625 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107572.523:8801): pid=60625 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107572.527:8802): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107572.527:8803): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107572.633:8804): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107572.633:8805): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107572.662:8806): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107572.662:8807): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107572.679:8808): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107572.679:8809): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107572.718:8810): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107572.718:8811): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107572.738:8812): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107572.739:8813): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1770107572.768:8814): pid=58940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=58943 suid=74 rport=46670 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107572.768:8815): pid=58940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=58943 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107572.769:8816): pid=58940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107572.770:8817): pid=58940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=58940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107572.770:8818): pid=58940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770107572.788:8819): pid=60792 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107572.788:8820): pid=60792 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A716474716C6E65776C646975646D7675656961706C686B7A696664666C7777203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107572.789:8821): pid=60792 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107572.794:8822): pid=60792 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107572.983:8823): pid=60792 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107572.983:8824): pid=60792 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107572.987:8825): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107572.987:8826): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107573.007:8827): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107573.007:8828): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107573.061:8829): pid=60810 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107573.062:8830): pid=60810 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C63706C73667A6371656C717A7367706665747272667162646C696275686F65203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107573.062:8831): pid=60810 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107573.065:8832): pid=60810 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107573.241:8833): pid=60810 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107573.242:8834): pid=60810 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107573.245:8835): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107573.245:8836): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107573.267:8837): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107573.267:8838): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107573.295:8839): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107573.295:8840): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107573.409:8841): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107573.409:8842): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107573.438:8843): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107573.438:8844): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107573.460:8845): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107573.461:8846): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107573.499:8847): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107573.499:8848): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107573.523:8849): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107573.523:8850): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107573.584:8851): pid=60872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107573.584:8852): pid=60872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E787A6E6C6562727464646D636C656F7567686A6A6D706279696A767573696B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107573.585:8853): pid=60872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107573.587:8854): pid=60872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107573.766:8855): pid=60872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107573.767:8856): pid=60872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107573.772:8857): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107573.772:8858): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107573.826:8859): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107573.827:8860): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107573.882:8861): pid=60890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107573.882:8862): pid=60890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A74617A77657764696268786F6269626F646E6864766A666669766976726168203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107573.883:8863): pid=60890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107573.885:8864): pid=60890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107574.064:8865): pid=60890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107574.064:8866): pid=60890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107574.067:8867): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107574.067:8868): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107574.090:8869): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107574.090:8870): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107574.114:8871): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107574.114:8872): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107574.219:8873): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107574.219:8874): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107574.274:8875): pid=60920 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107574.275:8876): pid=60920 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646F6D7861666E726D73646E6B787A6267756379696778686F6176686D726870203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107574.276:8877): pid=60920 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107574.278:8878): pid=60920 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107574.762:8879): prog-id=485 op=LOAD type=BPF msg=audit(1770107574.762:8880): prog-id=486 op=LOAD type=BPF msg=audit(1770107574.762:8881): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107574.762:8882): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107574.763:8883): prog-id=487 op=LOAD type=BPF msg=audit(1770107574.764:8884): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107574.765:8885): prog-id=488 op=LOAD type=BPF msg=audit(1770107574.765:8886): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107574.765:8887): prog-id=489 op=LOAD type=BPF msg=audit(1770107574.765:8888): prog-id=490 op=LOAD type=BPF msg=audit(1770107574.765:8889): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107574.765:8890): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107574.767:8891): prog-id=491 op=LOAD type=BPF msg=audit(1770107574.767:8892): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107574.767:8893): prog-id=492 op=LOAD type=BPF msg=audit(1770107574.767:8894): prog-id=493 op=LOAD type=BPF msg=audit(1770107574.767:8895): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107574.767:8896): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107574.770:8897): prog-id=494 op=LOAD type=BPF msg=audit(1770107574.770:8898): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107574.845:8899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107574.845:8900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107574.877:8901): pid=60920 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107574.878:8902): pid=60920 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107574.883:8903): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107574.883:8904): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107575.116:8905): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107575.116:8906): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107575.168:8907): pid=60976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107575.168:8908): pid=60976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73736667776672786A76736C67627474666776736E6E776F6763796373796A7A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107575.169:8909): pid=60976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107575.173:8910): pid=60976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107575.358:8911): pid=60976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107575.358:8912): pid=60976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107575.362:8913): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107575.362:8914): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107575.607:8915): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107575.607:8916): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107575.671:8917): pid=61045 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107575.671:8918): pid=61045 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776B746A796E776C7A737A75746B7374737964676E656A75756E616764626B73203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107575.672:8919): pid=61045 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107575.674:8920): pid=61045 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107576.103:8921): pid=61045 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107576.104:8922): pid=61045 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107576.107:8923): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107576.107:8924): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107577.098:8925): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107577.098:8926): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107577.162:8927): pid=61089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107577.162:8928): pid=61089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737169667270777864626572767266716B686778686C76686462746F6F6B636A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107577.163:8929): pid=61089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107577.165:8930): pid=61089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107577.706:8931): prog-id=495 op=LOAD type=SYSCALL msg=audit(1770107577.706:8931): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffce5273560 a2=90 a3=9500000000 items=0 ppid=61321 pid=61322 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107577.706:8931): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F353634623839613932653237376631363931316435353132343730393439 type=BPF msg=audit(1770107577.717:8932): prog-id=496 op=LOAD type=SYSCALL msg=audit(1770107577.717:8932): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff239905c0 a2=90 a3=9500000000 items=0 ppid=61327 pid=61328 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107577.717:8932): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F316434333366663365623464636434366531616364333638383130343233 type=BPF msg=audit(1770107577.752:8933): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107577.752:8934): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107577.776:8935): prog-id=497 op=LOAD type=SYSCALL msg=audit(1770107577.776:8935): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd6a0a5570 a2=90 a3=9500000000 items=0 ppid=61358 pid=61359 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107577.776:8935): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663130386231383135613466616631373531616431326561363534333633 type=BPF msg=audit(1770107577.808:8936): prog-id=498 op=LOAD type=SYSCALL msg=audit(1770107577.808:8936): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe1230feb0 a2=90 a3=9500000000 items=0 ppid=61371 pid=61372 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107577.808:8936): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616339653564363264353038353265306633663461353066316331393137 type=BPF msg=audit(1770107577.834:8937): prog-id=499 op=LOAD type=SYSCALL msg=audit(1770107577.834:8937): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff20d0e9a0 a2=90 a3=9500000001 items=0 ppid=61378 pid=61379 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107577.834:8937): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363563323236646363633063646130303330333731616333363731353331 type=BPF msg=audit(1770107577.882:8938): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107577.979:8939): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107578.318:8940): prog-id=500 op=LOAD type=SYSCALL msg=audit(1770107578.318:8940): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcf10b2230 a2=90 a3=9500000000 items=0 ppid=61549 pid=61550 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107578.318:8940): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363338393737303536653462623165343639363734656166346434386133 type=SERVICE_START msg=audit(1770107581.618:8941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107581.619:8942): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1770107581.907:8943): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107587.402:8944): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107587.954:8945): prog-id=501 op=LOAD type=SYSCALL msg=audit(1770107587.954:8945): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffef92303c0 a2=90 a3=9500000000 items=0 ppid=62975 pid=62976 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107587.954:8945): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393536393033623838646236326135656131346663616533666539303264 type=BPF msg=audit(1770107587.960:8946): prog-id=502 op=LOAD type=SYSCALL msg=audit(1770107587.960:8946): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe4f06fdc0 a2=90 a3=9500000000 items=0 ppid=62979 pid=62980 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107587.960:8946): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F626536316336653331373662336161613930393237363431323938373731 type=BPF msg=audit(1770107588.047:8947): prog-id=503 op=LOAD type=SYSCALL msg=audit(1770107588.047:8947): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc74b30430 a2=90 a3=9500000000 items=0 ppid=62991 pid=62992 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107588.047:8947): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393634656462653062336533386664356662326631636263383930663562 type=SERVICE_START msg=audit(1770107588.099:8948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107588.269:8949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107590.128:8950): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107591.245:8951): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107591.496:8952): pid=61089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107591.497:8953): pid=61089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107591.502:8954): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107591.502:8955): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107591.681:8956): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107591.681:8957): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1770107591.692:8958): pid=63465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=63465 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_ACCT msg=audit(1770107591.749:8959): pid=63475 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107591.750:8960): pid=63475 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6A6C6E6E6E6B6D6C6379676577697A706A6A716E6A687A6E6162636A78616F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107591.751:8961): pid=63475 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107591.755:8962): pid=63475 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRYPTO_SESSION msg=audit(1770107591.903:8963): pid=63460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=63465 suid=74 rport=49228 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107591.903:8964): pid=63460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=63465 suid=74 rport=49228 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_END msg=audit(1770107591.933:8965): pid=63475 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107591.933:8966): pid=63475 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107591.936:8967): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107591.937:8968): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107591.955:8969): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107591.955:8970): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107592.014:8971): pid=63581 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107592.014:8972): pid=63581 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626C70686666736B76657779776370756A6273666F7567696562726969646C65203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107592.015:8973): pid=63581 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107592.017:8974): pid=63581 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107592.230:8975): pid=63581 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107592.230:8976): pid=63581 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107592.233:8977): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107592.234:8978): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107592.262:8979): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107592.262:8980): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107592.294:8981): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107592.294:8982): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107592.314:8983): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107592.314:8984): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107592.353:8985): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107592.353:8986): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107592.620:8987): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107592.620:8988): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107592.659:8989): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107592.659:8990): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107592.681:8991): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107592.681:8992): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107592.734:8993): pid=63793 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107592.734:8994): pid=63793 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7969787A616C616C7177716C7365737A6F6C6D776965646F6D74687769766278203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107592.735:8995): pid=63793 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107592.739:8996): pid=63793 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107592.898:8997): pid=63793 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107592.898:8998): pid=63793 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107592.903:8999): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107592.903:9000): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107592.925:9001): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107592.925:9002): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107592.976:9003): pid=63809 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107592.977:9004): pid=63809 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F656E6E7A7466656D737179787A78746177646D6C6A79736F72786462707169203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107592.977:9005): pid=63809 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1770107592.978:9006): pid=63460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=63465 suid=74 rport=49228 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107592.978:9007): pid=63460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=63465 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107592.979:9008): pid=63460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107592.979:9009): pid=63460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=63460 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107592.980:9010): pid=63460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_START msg=audit(1770107592.980:9011): pid=63809 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107593.519:9012): prog-id=504 op=LOAD type=BPF msg=audit(1770107593.519:9013): prog-id=505 op=LOAD type=BPF msg=audit(1770107593.519:9014): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107593.519:9015): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107593.520:9016): prog-id=506 op=LOAD type=BPF msg=audit(1770107593.520:9017): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107593.522:9018): prog-id=507 op=LOAD type=BPF msg=audit(1770107593.522:9019): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107593.522:9020): prog-id=508 op=LOAD type=BPF msg=audit(1770107593.522:9021): prog-id=509 op=LOAD type=BPF msg=audit(1770107593.522:9022): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107593.522:9023): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107593.524:9024): prog-id=510 op=LOAD type=BPF msg=audit(1770107593.524:9025): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107593.524:9026): prog-id=511 op=LOAD type=BPF msg=audit(1770107593.524:9027): prog-id=512 op=LOAD type=BPF msg=audit(1770107593.524:9028): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107593.524:9029): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107593.526:9030): prog-id=513 op=LOAD type=BPF msg=audit(1770107593.526:9031): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107593.558:9032): pid=63809 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107593.559:9033): pid=63809 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107593.563:9034): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107593.563:9035): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107593.842:9036): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107593.842:9037): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107593.909:9038): pid=63925 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107593.909:9039): pid=63925 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666C6E786C726F6B666E676E7A6A766274796B6C7771746A71707A666B706564203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107593.910:9040): pid=63925 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107593.913:9041): pid=63925 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107594.489:9042): prog-id=514 op=LOAD type=BPF msg=audit(1770107594.489:9043): prog-id=515 op=LOAD type=BPF msg=audit(1770107594.489:9044): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107594.489:9045): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107594.490:9046): prog-id=516 op=LOAD type=BPF msg=audit(1770107594.490:9047): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107594.492:9048): prog-id=517 op=LOAD type=BPF msg=audit(1770107594.492:9049): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107594.492:9050): prog-id=518 op=LOAD type=BPF msg=audit(1770107594.492:9051): prog-id=519 op=LOAD type=BPF msg=audit(1770107594.492:9052): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107594.492:9053): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107594.494:9054): prog-id=520 op=LOAD type=BPF msg=audit(1770107594.494:9055): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107594.494:9056): prog-id=521 op=LOAD type=BPF msg=audit(1770107594.494:9057): prog-id=522 op=LOAD type=BPF msg=audit(1770107594.494:9058): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107594.494:9059): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107594.497:9060): prog-id=523 op=LOAD type=BPF msg=audit(1770107594.497:9061): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107594.589:9062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_clustercheck comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107594.619:9063): pid=63925 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107594.620:9064): pid=63925 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107594.623:9065): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107594.623:9066): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107594.655:9067): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107594.655:9068): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107594.684:9069): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107594.684:9070): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107594.788:9071): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107594.789:9072): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107594.850:9073): pid=64025 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107594.850:9074): pid=64025 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616367756C6A7076756F636C75787476637367626B6A706A706A6F69646A6C75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107594.851:9075): pid=64025 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107594.856:9076): pid=64025 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107595.021:9077): pid=64025 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107595.022:9078): pid=64025 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107595.025:9079): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107595.025:9080): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107595.302:9081): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107595.302:9082): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107595.330:9083): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107595.330:9084): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107595.348:9085): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107595.348:9086): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107595.383:9087): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107595.383:9088): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107595.402:9089): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107595.402:9090): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107595.460:9091): pid=64073 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107595.460:9092): pid=64073 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B776E7574727A7478717A73707063636B616B6C61737A61736E706E61637A64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107595.460:9093): pid=64073 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107595.463:9094): pid=64073 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107595.623:9095): pid=64073 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107595.623:9096): pid=64073 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107595.626:9097): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107595.626:9098): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107595.655:9099): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107595.655:9100): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107595.688:9101): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107595.688:9102): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107595.710:9103): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107595.710:9104): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107595.740:9105): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107595.740:9106): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107595.763:9107): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107595.763:9108): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107595.820:9109): pid=64177 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107595.820:9110): pid=64177 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6F6B66757762657967656E6D727A63646D717A62746B6F79786775797A6970203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107595.821:9111): pid=64177 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107595.823:9112): pid=64177 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107596.012:9113): pid=64177 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107596.012:9114): pid=64177 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107596.015:9115): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107596.015:9116): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107596.036:9117): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107596.037:9118): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107596.059:9119): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107596.059:9120): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107596.151:9121): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107596.151:9122): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107596.200:9123): pid=64207 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107596.201:9124): pid=64207 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7178656C686F697A6A796476676D72686C78786A696C6261616F6E646F6F71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107596.201:9125): pid=64207 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107596.205:9126): pid=64207 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107596.399:9127): pid=64207 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107596.399:9128): pid=64207 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107596.402:9129): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107596.403:9130): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107596.695:9131): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107596.695:9132): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107596.759:9133): pid=64231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107596.759:9134): pid=64231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676F65627773707973626A65756E6C63706C736462686E6F6872646E6D686268203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107596.760:9135): pid=64231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107596.763:9136): pid=64231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107596.899:9137): pid=64231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107596.900:9138): pid=64231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107596.903:9139): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107596.903:9140): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107596.993:9141): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107596.993:9142): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107597.044:9143): pid=64247 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107597.045:9144): pid=64247 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C64686A706C776C7069646D79676F78717471666B65666C6F6F66677A6B7367203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107597.045:9145): pid=64247 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107597.048:9146): pid=64247 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107597.230:9147): pid=64247 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107597.230:9148): pid=64247 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107597.234:9149): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107597.234:9150): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107597.837:9151): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107597.837:9152): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107597.864:9153): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107597.865:9154): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107597.885:9155): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107597.885:9156): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107597.916:9157): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107597.916:9158): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107597.938:9159): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107597.938:9160): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107597.988:9161): pid=64303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107597.988:9162): pid=64303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727A716678726C79656B6D6B6F7A6C6B6571787261757667746266667772736B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107597.988:9163): pid=64303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107597.990:9164): pid=64303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107598.137:9165): pid=64303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107598.137:9166): pid=64303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107598.141:9167): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107598.141:9168): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107598.168:9169): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107598.168:9170): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107598.202:9171): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107598.202:9172): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107598.222:9173): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107598.222:9174): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107598.251:9175): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107598.251:9176): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107598.273:9177): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107598.273:9178): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107598.327:9179): pid=64348 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107598.327:9180): pid=64348 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716169696B656C717379726B6F7A6676776F656870727374636F667269736561203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107598.328:9181): pid=64348 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107598.331:9182): pid=64348 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107598.515:9183): pid=64348 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107598.515:9184): pid=64348 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107598.519:9185): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107598.519:9186): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107598.544:9187): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107598.544:9188): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107598.576:9189): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107598.576:9190): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107598.789:9191): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107598.789:9192): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107598.843:9193): pid=64386 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107598.843:9194): pid=64386 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66677970636C6B677A6E6E70686B68746F71666A6678676574746E74676B6F61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107598.844:9195): pid=64386 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107598.845:9196): pid=64386 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107599.025:9197): pid=64386 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107599.025:9198): pid=64386 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107599.029:9199): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107599.029:9200): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107599.273:9201): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107599.273:9202): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107599.296:9203): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107599.296:9204): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107599.315:9205): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107599.315:9206): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107599.348:9207): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107599.348:9208): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107599.373:9209): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107599.373:9210): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107599.432:9211): pid=64436 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107599.432:9212): pid=64436 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69767A6B786D756F7A79766B677466737165676F646A666578666D7164796E71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107599.433:9213): pid=64436 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107599.435:9214): pid=64436 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107599.618:9215): pid=64436 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107599.619:9216): pid=64436 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107599.623:9217): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107599.623:9218): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107599.649:9219): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107599.649:9220): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107599.700:9221): pid=64464 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107599.700:9222): pid=64464 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63736769697171636B7171676D796C757276797974776461706B6C636B76686C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107599.701:9223): pid=64464 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107599.703:9224): pid=64464 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107599.881:9225): pid=64464 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107599.882:9226): pid=64464 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107599.886:9227): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107599.886:9228): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107599.909:9229): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107599.910:9230): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107599.940:9231): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107599.941:9232): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107600.058:9233): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107600.058:9234): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107600.087:9235): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107600.087:9236): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107600.113:9237): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107600.113:9238): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107600.174:9239): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107600.174:9240): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107600.208:9241): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107600.208:9242): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107600.249:9243): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107600.249:9244): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107600.287:9245): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107600.287:9246): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107600.328:9247): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107600.328:9248): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107600.355:9249): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107600.356:9250): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107600.389:9251): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107600.389:9252): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107600.419:9253): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107600.419:9254): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107600.491:9255): pid=64568 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107600.491:9256): pid=64568 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7768646A706A74746478796E6968706764626F677A616B7A68627069776762203B20414E5349424C455F4153594E435F4449523D2F746D702F2E616E7369626C655F6173796E63202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737303130373630302E303835373435382D3133303739332D353934393734393931383138302F6173796E635F777261707065722E7079203434343733383733363534352033363030202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737303130373630302E303835373435382D3133303739332D353934393734393931383138302F416E736962616C6C5A5F636F6D6D616E642E7079205F exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107600.492:9257): pid=64568 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107600.494:9258): pid=64568 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107600.684:9259): pid=64568 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107600.685:9260): pid=64568 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107600.690:9261): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107600.690:9262): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107600.800:9263): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107600.801:9264): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107600.862:9265): pid=64597 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107600.862:9266): pid=64597 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7471666B6E6B736D727778656D7465647874696C7661746C717276776E787876203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107600.863:9267): pid=64597 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107600.866:9268): pid=64597 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107601.026:9269): pid=64597 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107601.026:9270): pid=64597 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107601.029:9271): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107601.029:9272): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1770107603.060:9273): pid=64864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=64864 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107603.304:9274): pid=64814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=64864 suid=74 rport=42880 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107603.304:9275): pid=64814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=64864 suid=74 rport=42880 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107604.256:9276): pid=64814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=64864 suid=74 rport=42880 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107604.256:9277): pid=64814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=64864 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107604.256:9278): pid=64814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107604.257:9279): pid=64814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=64814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107604.257:9280): pid=64814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107608.983:9281): pid=65284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=65284 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107609.249:9282): pid=65283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=65284 suid=74 rport=53120 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107609.249:9283): pid=65283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=65284 suid=74 rport=53120 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1770107611.103:9284): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107611.103:9285): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107611.163:9286): pid=65366 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107611.163:9287): pid=65366 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6E6679726372626F7A6F69666C667969626B7A706E79647A6A63636B6E6D6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107611.164:9288): pid=65366 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107611.169:9289): pid=65366 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1770107611.304:9290): pid=65283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=65284 suid=74 rport=53120 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107611.305:9291): pid=65283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=65284 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107611.305:9292): pid=65283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107611.306:9293): pid=65283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=65283 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107611.306:9294): pid=65283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1770107611.337:9295): pid=65366 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107611.337:9296): pid=65366 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107611.339:9297): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107611.339:9298): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1770107612.143:9299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107612.483:9300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107618.173:9301): pid=65870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=65870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107618.449:9302): pid=65869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=65870 suid=74 rport=37356 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107618.449:9303): pid=65869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=65870 suid=74 rport=37356 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770107619.147:9304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107619.280:9305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107621.214:9306): pid=65869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=65870 suid=74 rport=37356 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107621.214:9307): pid=65869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=65870 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107621.215:9308): pid=65869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107621.215:9309): pid=65869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=65869 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107621.215:9310): pid=65869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107621.401:9311): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107621.401:9312): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107621.451:9313): pid=66153 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107621.452:9314): pid=66153 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6A6B7863696C777462626F6D7364627565646B666E7575727771786979697A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107621.454:9315): pid=66153 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107621.458:9316): pid=66153 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107621.625:9317): pid=66153 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107621.625:9318): pid=66153 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107621.628:9319): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107621.628:9320): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107622.051:9321): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107622.051:9322): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107622.101:9323): pid=66217 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107622.101:9324): pid=66217 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61636E746161746D63717865706F746677786D7A72796D6C6A706373676B6C73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107622.102:9325): pid=66217 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107622.105:9326): pid=66217 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107622.259:9327): pid=66217 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107622.260:9328): pid=66217 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107622.264:9329): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107622.264:9330): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107622.357:9331): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107622.357:9332): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107622.415:9333): pid=66241 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107622.415:9334): pid=66241 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766D71797364656C7A776F61656F6569617A626F67787A656E6D7A6D72726C77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107622.416:9335): pid=66241 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107622.418:9336): pid=66241 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107622.636:9337): pid=66241 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107622.637:9338): pid=66241 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107622.640:9339): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107622.640:9340): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107622.782:9341): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107622.782:9342): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107622.859:9343): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107622.859:9344): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107622.879:9345): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107622.880:9346): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107622.915:9347): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107622.915:9348): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107622.943:9349): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107622.943:9350): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107622.999:9351): pid=66373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107623.000:9352): pid=66373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656B6C627A6E6B6F6E6B6C6A6F6A70696B61646F766C76766175677A6370736E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107623.001:9353): pid=66373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107623.003:9354): pid=66373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107623.179:9355): pid=66373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107623.180:9356): pid=66373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107623.184:9357): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107623.184:9358): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107623.206:9359): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107623.206:9360): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107623.264:9361): pid=66391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107623.264:9362): pid=66391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B746C736B6B6664796E6B65797574777A736C676A6568767A7962667A777A71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107623.265:9363): pid=66391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107623.268:9364): pid=66391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107623.443:9365): pid=66391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107623.444:9366): pid=66391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107623.447:9367): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107623.448:9368): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107623.466:9369): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107623.466:9370): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107623.497:9371): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107623.497:9372): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107623.586:9373): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107623.586:9374): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107623.646:9375): pid=66429 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107623.646:9376): pid=66429 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78756863786D686E726D7A6A7673786168766377766C7971706463696C696C66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107623.648:9377): pid=66429 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107623.650:9378): pid=66429 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107623.818:9379): pid=66429 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107623.818:9380): pid=66429 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107623.822:9381): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107623.822:9382): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107623.945:9383): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107623.945:9384): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107624.005:9385): pid=66445 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107624.005:9386): pid=66445 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6766776370647870676B6766696671636B796D796864727263727774766C6767203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107624.006:9387): pid=66445 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107624.009:9388): pid=66445 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107624.550:9389): pid=66445 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107624.552:9390): pid=66445 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107624.555:9391): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107624.555:9392): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107624.750:9393): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107624.750:9394): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107624.812:9395): pid=66540 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107624.813:9396): pid=66540 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75686D64636D636E6B626B6F71666B766369636A6B62616D676863677777707A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107624.813:9397): pid=66540 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107624.816:9398): pid=66540 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107625.028:9399): pid=66540 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107625.028:9400): pid=66540 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107625.033:9401): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107625.033:9402): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107625.478:9403): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107625.478:9404): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107625.537:9405): pid=66567 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107625.537:9406): pid=66567 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656C646F6F6A7A61776E6A6E69796A76656A676E6E73737268716671656F6F76203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107625.537:9407): pid=66567 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107625.539:9408): pid=66567 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107625.721:9409): pid=66567 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107625.721:9410): pid=66567 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107625.725:9411): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107625.725:9412): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107625.845:9413): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107625.845:9414): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107625.904:9415): pid=66583 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107625.904:9416): pid=66583 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636F7177666169757168627870706C6E66636C636C69716668716F6762686F6B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107625.906:9417): pid=66583 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107625.909:9418): pid=66583 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107626.098:9419): pid=66583 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107626.098:9420): pid=66583 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107626.102:9421): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107626.102:9422): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107626.408:9423): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107626.408:9424): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107626.468:9425): pid=66660 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107626.469:9426): pid=66660 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E776D696967786B637264716A79647779776C78766A64667273656175766267203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107626.470:9427): pid=66660 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107626.474:9428): pid=66660 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107626.656:9429): pid=66660 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107626.657:9430): pid=66660 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107626.661:9431): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107626.661:9432): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107626.873:9433): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107626.873:9434): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107626.902:9435): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107626.902:9436): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107626.929:9437): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107626.929:9438): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107626.964:9439): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107626.964:9440): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107626.995:9441): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107626.995:9442): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107627.054:9443): pid=66710 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107627.054:9444): pid=66710 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707A697A687A73716267776F6D766468796F7A646D646E756961757A66716763203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107627.055:9445): pid=66710 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107627.058:9446): pid=66710 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107627.229:9447): pid=66710 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107627.230:9448): pid=66710 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107627.233:9449): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107627.233:9450): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107627.261:9451): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107627.261:9452): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107627.313:9453): pid=66728 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107627.313:9454): pid=66728 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7168787A7677636B746C6663616E6B6275706C6169786F6F63687963627470203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107627.313:9455): pid=66728 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107627.315:9456): pid=66728 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107627.492:9457): pid=66728 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107627.492:9458): pid=66728 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107627.496:9459): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107627.496:9460): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107627.519:9461): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107627.519:9462): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107627.545:9463): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107627.546:9464): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107627.607:9465): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107627.608:9466): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107627.639:9467): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107627.640:9468): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107627.664:9469): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107627.664:9470): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107627.700:9471): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107627.700:9472): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107627.725:9473): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107627.725:9474): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107627.784:9475): pid=66798 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107627.785:9476): pid=66798 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796D62626C6C76657171737764616D72707A68777268786B6778686F71747469203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107627.785:9477): pid=66798 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107627.788:9478): pid=66798 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107627.967:9479): pid=66798 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107627.967:9480): pid=66798 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107627.971:9481): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107627.971:9482): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107627.997:9483): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107627.997:9484): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107628.058:9485): pid=66816 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107628.058:9486): pid=66816 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776B75796A7567716C717072736E616C6B757774706A6B64787A696262636166203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107628.059:9487): pid=66816 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107628.061:9488): pid=66816 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107628.234:9489): pid=66816 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107628.234:9490): pid=66816 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107628.238:9491): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107628.238:9492): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107628.256:9493): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107628.256:9494): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107628.280:9495): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107628.281:9496): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107628.396:9497): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107628.396:9498): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107628.423:9499): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107628.424:9500): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107628.444:9501): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107628.444:9502): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107628.477:9503): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107628.477:9504): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107628.502:9505): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107628.502:9506): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107628.566:9507): pid=66886 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107628.567:9508): pid=66886 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726D616A6D676378776C67656D6D767178726770726A79796A64617064646478203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107628.567:9509): pid=66886 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107628.570:9510): pid=66886 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107628.762:9511): pid=66886 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107628.762:9512): pid=66886 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107628.766:9513): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107628.766:9514): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107628.787:9515): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107628.787:9516): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107628.844:9517): pid=66904 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107628.845:9518): pid=66904 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706F7A736E706765636A6676756A616F636D7469696D66696C78647470797675203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107628.845:9519): pid=66904 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107628.847:9520): pid=66904 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107629.027:9521): pid=66904 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107629.027:9522): pid=66904 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107629.031:9523): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107629.031:9524): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107629.050:9525): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107629.050:9526): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107629.080:9527): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107629.080:9528): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107629.179:9529): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107629.180:9530): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107629.207:9531): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107629.207:9532): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107629.229:9533): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107629.229:9534): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107629.261:9535): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107629.261:9536): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107629.321:9537): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107629.321:9538): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107629.379:9539): pid=66966 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107629.379:9540): pid=66966 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6C6670616771766979676176616373637263647973786772616E72686F757A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107629.380:9541): pid=66966 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107629.382:9542): pid=66966 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107629.570:9543): pid=66966 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107629.571:9544): pid=66966 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107629.575:9545): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107629.575:9546): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107629.600:9547): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107629.600:9548): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107629.659:9549): pid=66994 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107629.659:9550): pid=66994 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7278727473696B76676776766F75777679796B716271706164796F616A6A70203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107629.660:9551): pid=66994 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107629.662:9552): pid=66994 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107629.847:9553): pid=66994 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107629.848:9554): pid=66994 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107629.852:9555): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107629.852:9556): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107629.875:9557): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107629.875:9558): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107629.906:9559): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107629.906:9560): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107630.002:9561): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107630.002:9562): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107630.063:9563): pid=67024 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107630.063:9564): pid=67024 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666E64676F6F7178727367757769707373726866676362626B71757775706162203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107630.064:9565): pid=67024 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107630.067:9566): pid=67024 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107630.586:9567): prog-id=524 op=LOAD type=BPF msg=audit(1770107630.586:9568): prog-id=525 op=LOAD type=BPF msg=audit(1770107630.586:9569): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107630.586:9570): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107630.587:9571): prog-id=526 op=LOAD type=BPF msg=audit(1770107630.587:9572): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107630.589:9573): prog-id=527 op=LOAD type=BPF msg=audit(1770107630.589:9574): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107630.589:9575): prog-id=528 op=LOAD type=BPF msg=audit(1770107630.589:9576): prog-id=529 op=LOAD type=BPF msg=audit(1770107630.589:9577): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107630.589:9578): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107630.592:9579): prog-id=530 op=LOAD type=BPF msg=audit(1770107630.592:9580): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107630.592:9581): prog-id=531 op=LOAD type=BPF msg=audit(1770107630.592:9582): prog-id=532 op=LOAD type=BPF msg=audit(1770107630.592:9583): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107630.592:9584): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107630.594:9585): prog-id=533 op=LOAD type=BPF msg=audit(1770107630.594:9586): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107630.665:9587): pid=67024 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107630.665:9588): pid=67024 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107630.669:9589): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107630.669:9590): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107630.787:9591): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107630.787:9592): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107630.816:9593): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107630.816:9594): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107630.838:9595): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107630.838:9596): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107630.868:9597): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107630.868:9598): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107630.895:9599): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107630.895:9600): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107630.955:9601): pid=67167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107630.956:9602): pid=67167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7275787279716C76616A6279696E72726F696172716F6265766E6F7570717273203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107630.957:9603): pid=67167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107630.961:9604): pid=67167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107631.139:9605): pid=67167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107631.139:9606): pid=67167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107631.143:9607): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107631.143:9608): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107631.168:9609): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107631.168:9610): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107631.224:9611): pid=67201 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107631.224:9612): pid=67201 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6177777379657764736C6B666E64797174776B6F62767172727071666A6E77203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107631.225:9613): pid=67201 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107631.227:9614): pid=67201 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107631.409:9615): pid=67201 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107631.409:9616): pid=67201 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107631.414:9617): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107631.414:9618): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107631.436:9619): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107631.436:9620): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107631.464:9621): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107631.464:9622): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107631.574:9623): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107631.574:9624): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107631.600:9625): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107631.600:9626): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107631.623:9627): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107631.623:9628): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107631.657:9629): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107631.657:9630): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107631.682:9631): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107631.682:9632): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107631.737:9633): pid=67398 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107631.737:9634): pid=67398 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616A72747361777262656472657A7A7A616676706A77746F75786C6D656F6867203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107631.738:9635): pid=67398 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107631.740:9636): pid=67398 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107631.922:9637): pid=67398 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107631.922:9638): pid=67398 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107631.924:9639): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107631.924:9640): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107631.950:9641): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107631.950:9642): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107631.987:9643): pid=67444 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107631.987:9644): pid=67444 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7973686C636A77777670656377736F79787A6A6F76716A73726D767661666D64203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107631.987:9645): pid=67444 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107631.989:9646): pid=67444 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107632.138:9647): pid=67444 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107632.139:9648): pid=67444 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107632.142:9649): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107632.142:9650): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107632.163:9651): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107632.163:9652): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107632.192:9653): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107632.192:9654): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107632.281:9655): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107632.281:9656): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107632.338:9657): pid=67543 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107632.339:9658): pid=67543 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68706F6B7075636A776A65766665636F746E6D776D6E67676461757578626770203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107632.339:9659): pid=67543 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107632.341:9660): pid=67543 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107632.876:9661): prog-id=534 op=LOAD type=BPF msg=audit(1770107632.876:9662): prog-id=535 op=LOAD type=BPF msg=audit(1770107632.876:9663): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107632.876:9664): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107632.877:9665): prog-id=536 op=LOAD type=BPF msg=audit(1770107632.877:9666): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107632.879:9667): prog-id=537 op=LOAD type=BPF msg=audit(1770107632.879:9668): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107632.879:9669): prog-id=538 op=LOAD type=BPF msg=audit(1770107632.879:9670): prog-id=539 op=LOAD type=BPF msg=audit(1770107632.879:9671): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107632.879:9672): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107632.924:9673): prog-id=540 op=LOAD type=BPF msg=audit(1770107632.924:9674): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107632.924:9675): prog-id=541 op=LOAD type=BPF msg=audit(1770107632.924:9676): prog-id=542 op=LOAD type=BPF msg=audit(1770107632.924:9677): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107632.924:9678): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107632.926:9679): prog-id=543 op=LOAD type=BPF msg=audit(1770107632.926:9680): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107632.991:9681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107632.991:9682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107633.022:9683): pid=67543 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107633.022:9684): pid=67543 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107633.026:9685): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107633.026:9686): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107633.219:9687): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107633.219:9688): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107633.281:9689): pid=67701 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107633.281:9690): pid=67701 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696C6868766B776969756475657062636C6468627671746D6D74736971687467203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107633.282:9691): pid=67701 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107633.287:9692): pid=67701 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107633.477:9693): pid=67701 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107633.478:9694): pid=67701 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107633.482:9695): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107633.482:9696): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107633.690:9697): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107633.690:9698): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107633.750:9699): pid=67725 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107633.750:9700): pid=67725 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777862686F626772696A77797271756875616C73726962646676706E6C6B7663203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107633.751:9701): pid=67725 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107633.753:9702): pid=67725 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107634.224:9703): pid=67725 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107634.224:9704): pid=67725 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107634.228:9705): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107634.228:9706): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107635.039:9707): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107635.039:9708): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107635.101:9709): pid=67775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107635.101:9710): pid=67775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746E6872796566756568746A69616E61757A6C71657A75646E6775707772666D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107635.101:9711): pid=67775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107635.105:9712): pid=67775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107635.695:9713): prog-id=544 op=LOAD type=SYSCALL msg=audit(1770107635.695:9713): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc92833890 a2=90 a3=9500000000 items=0 ppid=68014 pid=68015 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107635.695:9713): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393630353833373763633636316638616263343537613562336263393536 type=BPF msg=audit(1770107635.697:9714): prog-id=545 op=LOAD type=SYSCALL msg=audit(1770107635.697:9714): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd07d95340 a2=90 a3=9500000000 items=0 ppid=68016 pid=68017 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107635.697:9714): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633737343063313863646465646237353062336438383062613839303937 type=BPF msg=audit(1770107635.720:9715): prog-id=546 op=LOAD type=SYSCALL msg=audit(1770107635.720:9715): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffdfeda8260 a2=90 a3=9500000001 items=0 ppid=68021 pid=68022 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107635.720:9715): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633762613361643635313162653834316264626239666135643730383636 type=BPF msg=audit(1770107635.741:9716): prog-id=547 op=LOAD type=SYSCALL msg=audit(1770107635.741:9716): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffed75b3d90 a2=90 a3=9500000000 items=0 ppid=68027 pid=68028 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107635.741:9716): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393433643137663736373431653835316239343161393462383563666633 type=BPF msg=audit(1770107635.786:9717): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107635.792:9718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107635.789:9719): prog-id=548 op=LOAD type=SYSCALL msg=audit(1770107635.789:9719): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffddf1c0310 a2=90 a3=9500000001 items=0 ppid=68034 pid=68035 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107635.789:9719): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373363613265643037336562636437323739663934366230396564363834 type=USER_ACCT msg=audit(1770107635.795:9720): pid=68060 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107635.796:9721): pid=68060 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107635.796:9722): pid=68060 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_START msg=audit(1770107635.797:9723): pid=68060 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=BPF msg=audit(1770107635.845:9724): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107635.847:9725): pid=68060 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107635.847:9726): pid=68060 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107635.853:9727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770107635.857:9728): pid=68076 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107635.858:9729): pid=68076 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107635.859:9730): pid=68076 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=BPF msg=audit(1770107635.862:9731): prog-id=0 op=UNLOAD type=USER_ACCT msg=audit(1770107635.873:9732): pid=68108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1770107635.873:9733): pid=68108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1770107635.874:9734): pid=68108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770107635.875:9735): pid=68108 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=15 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770107635.875:9735): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd711b5940 a2=1 a3=0 items=0 ppid=1 pid=68108 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107635.875:9735): proctitle="(systemd)" type=USER_START msg=audit(1770107635.877:9736): pid=68108 uid=0 auid=0 ses=15 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1770107635.897:9737): prog-id=549 op=LOAD type=SYSCALL msg=audit(1770107635.897:9737): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff57aae2d0 a2=90 a3=0 items=0 ppid=1 pid=68108 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107635.897:9737): proctitle="(systemd)" type=BPF msg=audit(1770107635.899:9738): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107635.899:9739): prog-id=550 op=LOAD type=SYSCALL msg=audit(1770107635.899:9739): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff57aae370 a2=90 a3=4 items=0 ppid=1 pid=68108 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107635.899:9739): proctitle="(systemd)" type=BPF msg=audit(1770107635.899:9740): prog-id=0 op=UNLOAD type=CRYPTO_KEY_USER msg=audit(1770107635.911:9741): pid=68136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=68136 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770107635.950:9742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107636.014:9743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770107636.031:9744): pid=68076 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770107636.093:9745): pid=68076 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107636.094:9746): pid=68076 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRYPTO_SESSION msg=audit(1770107636.200:9747): pid=68127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=68136 suid=74 rport=57538 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107636.200:9748): pid=68127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=68136 suid=74 rport=57538 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=BPF msg=audit(1770107637.089:9749): prog-id=551 op=LOAD type=SYSCALL msg=audit(1770107637.089:9749): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc2986c650 a2=90 a3=9500000001 items=0 ppid=68424 pid=68425 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107637.089:9749): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F386338656230393335623230633238613334653230316136613634346265 type=BPF msg=audit(1770107637.256:9750): prog-id=552 op=LOAD type=SYSCALL msg=audit(1770107637.256:9750): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffdf58e1560 a2=90 a3=9500000001 items=0 ppid=68448 pid=68449 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107637.256:9750): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373733623132366161383564316431363937626530323136313133616334 type=USER_ACCT msg=audit(1770107637.316:9751): pid=68453 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107637.316:9752): pid=68453 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107637.317:9753): pid=68453 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_START msg=audit(1770107637.349:9754): pid=68453 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770107637.436:9755): pid=68453 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107637.436:9756): pid=68453 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=BPF msg=audit(1770107637.769:9757): prog-id=553 op=LOAD type=SYSCALL msg=audit(1770107637.769:9757): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffff54db8d0 a2=90 a3=9500000001 items=0 ppid=68610 pid=68611 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107637.769:9757): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313863633130653936313735616439623738386332366632353837633833 type=USER_ACCT msg=audit(1770107637.820:9758): pid=68619 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107637.821:9759): pid=68619 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107637.822:9760): pid=68619 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=BPF msg=audit(1770107637.833:9761): prog-id=554 op=LOAD type=SYSCALL msg=audit(1770107637.833:9761): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff206cb700 a2=90 a3=9500000001 items=0 ppid=68630 pid=68631 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107637.833:9761): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373731373562616135316132316466343864663732626563653465653336 type=USER_START msg=audit(1770107637.838:9762): pid=68619 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770107637.913:9763): pid=68619 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107637.913:9764): pid=68619 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_ACCT msg=audit(1770107637.934:9765): pid=68656 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107637.934:9766): pid=68656 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107637.944:9767): pid=68656 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107637.992:9768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770107638.014:9769): pid=68656 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770107638.058:9770): pid=68656 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107638.058:9771): pid=68656 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107638.192:9772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107638.474:9773): prog-id=555 op=LOAD type=SYSCALL msg=audit(1770107638.474:9773): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffead11fd30 a2=90 a3=9500000000 items=0 ppid=68827 pid=68828 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107638.474:9773): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363730343263636664653939353730373030383866643332363839313736 type=BPF msg=audit(1770107638.487:9774): prog-id=556 op=LOAD type=SYSCALL msg=audit(1770107638.487:9774): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff5d1a53f0 a2=90 a3=9500000001 items=0 ppid=68831 pid=68832 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107638.487:9774): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F386333383361366138313866663530316566633163326234323861323035 type=USER_ACCT msg=audit(1770107638.542:9775): pid=68836 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107638.543:9776): pid=68836 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107638.544:9777): pid=68836 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_START msg=audit(1770107638.575:9778): pid=68836 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_ACCT msg=audit(1770107638.588:9779): pid=68853 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c393,c583 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107638.589:9780): pid=68853 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c393,c583 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107638.589:9781): pid=68853 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c393,c583 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_START msg=audit(1770107638.591:9782): pid=68853 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c393,c583 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770107638.667:9783): pid=68836 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107638.668:9784): pid=68836 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770107638.668:9785): pid=68853 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c393,c583 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107638.669:9786): pid=68853 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c393,c583 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_AUTH msg=audit(1770107638.766:9787): pid=68896 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c393,c583 msg='op=PAM:authentication grantors=pam_rootok acct="nova" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_ACCT msg=audit(1770107638.766:9788): pid=68896 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c393,c583 msg='op=PAM:accounting grantors=pam_succeed_if acct="nova" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_ACQ msg=audit(1770107638.766:9789): pid=68896 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c393,c583 msg='op=PAM:setcred grantors=pam_rootok acct="nova" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_START msg=audit(1770107638.768:9790): pid=68896 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c393,c583 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_xauth acct="nova" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107643.145:9791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107643.450:9792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107645.421:9793): pid=68896 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c393,c583 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_xauth acct="nova" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107645.421:9794): pid=68896 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c393,c583 msg='op=PAM:setcred grantors=pam_rootok acct="nova" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=BPF msg=audit(1770107645.447:9795): prog-id=0 op=UNLOAD type=CRYPTO_KEY_USER msg=audit(1770107645.858:9796): pid=68127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=68136 suid=74 rport=57538 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107645.859:9797): pid=68127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=68136 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107645.860:9798): pid=68127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107645.861:9799): pid=68127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=68127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107645.861:9800): pid=68127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=BPF msg=audit(1770107645.935:9801): prog-id=557 op=LOAD type=SYSCALL msg=audit(1770107645.935:9801): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffdda8b0f50 a2=90 a3=9500000001 items=0 ppid=69463 pid=69464 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107645.935:9801): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313134303264623561386438666430643531376234313234336537633636 type=USER_ACCT msg=audit(1770107645.997:9802): pid=69468 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107645.998:9803): pid=69468 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107645.999:9804): pid=69468 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_START msg=audit(1770107646.031:9805): pid=69468 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770107646.110:9806): pid=69468 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107646.111:9807): pid=69468 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=BPF msg=audit(1770107646.478:9808): prog-id=558 op=LOAD type=SYSCALL msg=audit(1770107646.478:9808): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff436eda00 a2=90 a3=9500000001 items=0 ppid=69626 pid=69627 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107646.478:9808): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623738376162313331353966383636316163323235306539623738373631 type=USER_ACCT msg=audit(1770107646.524:9809): pid=69631 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107646.525:9810): pid=69631 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107646.526:9811): pid=69631 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_START msg=audit(1770107646.561:9812): pid=69631 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770107646.651:9813): pid=69631 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107646.651:9814): pid=69631 uid=0 auid=1002 ses=13 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770107646.655:9815): pid=67775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107646.656:9816): pid=67775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107646.660:9817): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107646.660:9818): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107646.784:9819): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107646.784:9820): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107646.846:9821): pid=69689 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107646.847:9822): pid=69689 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656374726F666E627A676B6C7A746B647175756A726E656E7968706B6D786871203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107646.849:9823): pid=69689 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107646.854:9824): pid=69689 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107647.044:9825): pid=69689 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107647.045:9826): pid=69689 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107647.049:9827): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107647.049:9828): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107647.078:9829): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107647.078:9830): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107647.125:9831): pid=69713 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107647.125:9832): pid=69713 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666774756C6F796F706B676A74697774676D6362717563756568637A7A666B6D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107647.126:9833): pid=69713 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107647.128:9834): pid=69713 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107647.286:9835): pid=69713 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107647.287:9836): pid=69713 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107647.290:9837): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107647.290:9838): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107647.314:9839): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107647.314:9840): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107647.364:9841): pid=69729 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107647.364:9842): pid=69729 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6F6E616B6D6C6D77656C626E6570696772707267746F716E757269686C7464203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107647.365:9843): pid=69729 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107647.367:9844): pid=69729 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107647.500:9845): pid=69729 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107647.501:9846): pid=69729 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107647.505:9847): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107647.505:9848): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107647.537:9849): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107647.538:9850): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107647.598:9851): pid=69745 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107647.599:9852): pid=69745 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A70766E6168707361707074766B63766271646A6571766D7168647066636C63203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107647.599:9853): pid=69745 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107647.602:9854): pid=69745 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107647.792:9855): pid=69745 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107647.792:9856): pid=69745 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107647.796:9857): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107647.796:9858): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107647.819:9859): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107647.819:9860): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107647.883:9861): pid=69761 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107647.883:9862): pid=69761 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6278787A66637766666F6F68697576777165707965737A66746E746F64717765203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107647.883:9863): pid=69761 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107647.886:9864): pid=69761 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107648.053:9865): pid=69761 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107648.053:9866): pid=69761 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107648.057:9867): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107648.057:9868): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107648.085:9869): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107648.085:9870): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107648.131:9871): pid=69785 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107648.131:9872): pid=69785 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716E7970616B716F616270707174656E6A6D676D737779786871696576767A7A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107648.131:9873): pid=69785 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107648.133:9874): pid=69785 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107648.301:9875): pid=69785 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107648.301:9876): pid=69785 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107648.305:9877): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107648.305:9878): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107648.335:9879): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107648.335:9880): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107648.386:9881): pid=69801 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107648.387:9882): pid=69801 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E63676D7564777776766562676B6A6161756275726D796E656B7370696C6E64203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107648.387:9883): pid=69801 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107648.389:9884): pid=69801 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107648.562:9885): pid=69801 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107648.563:9886): pid=69801 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107648.566:9887): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107648.566:9888): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107648.595:9889): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107648.595:9890): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107648.639:9891): pid=69817 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107648.639:9892): pid=69817 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67627972657675637273776E776B767479756B6C777275676E67736764637666203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107648.639:9893): pid=69817 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107648.641:9894): pid=69817 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107648.777:9895): pid=69817 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107648.777:9896): pid=69817 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107648.780:9897): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107648.780:9898): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107648.804:9899): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107648.805:9900): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107648.868:9901): pid=69833 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107648.868:9902): pid=69833 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687366676661767061766B6979787874696B7A746F646F6E64616F676672726F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107648.869:9903): pid=69833 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107648.873:9904): pid=69833 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107649.047:9905): pid=69833 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107649.048:9906): pid=69833 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107649.051:9907): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107649.051:9908): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107649.076:9909): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107649.076:9910): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107649.128:9911): pid=69857 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107649.128:9912): pid=69857 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74757763737167657362736F6A66766A676C6861717A67757575697577676C69203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107649.129:9913): pid=69857 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107649.132:9914): pid=69857 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107649.327:9915): pid=69857 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107649.328:9916): pid=69857 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107649.332:9917): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107649.332:9918): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107649.353:9919): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107649.354:9920): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107649.413:9921): pid=69873 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107649.413:9922): pid=69873 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61746E796871766E6D666D707067686F7A7278636B6E7870696E6F776B796364203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107649.414:9923): pid=69873 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107649.418:9924): pid=69873 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107649.431:9925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107649.617:9926): pid=69873 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107649.618:9927): pid=69873 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107649.621:9928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107649.622:9929): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107649.622:9930): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107649.644:9931): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107649.644:9932): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107649.702:9933): pid=69931 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107649.703:9934): pid=69931 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A716A6966646F6476716F776A63766B697466626761686F676B776C6D617164203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107649.703:9935): pid=69931 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107649.707:9936): pid=69931 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107649.879:9937): pid=69931 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107649.880:9938): pid=69931 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107649.882:9939): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107649.882:9940): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107649.900:9941): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107649.900:9942): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107649.957:9943): pid=69947 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107649.958:9944): pid=69947 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C686C68706E7965636D65736D6E756C6E6A79696976676B7A74746A6368766E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107649.959:9945): pid=69947 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107649.962:9946): pid=69947 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107650.106:9947): pid=69947 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107650.106:9948): pid=69947 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107650.110:9949): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107650.110:9950): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107650.136:9951): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107650.136:9952): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107650.204:9953): pid=69971 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107650.205:9954): pid=69971 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A70696668676B67716876796A7967616F7867706971676468696962736765203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107650.206:9955): pid=69971 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107650.208:9956): pid=69971 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107650.370:9957): pid=69971 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107650.370:9958): pid=69971 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107650.374:9959): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107650.374:9960): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107650.398:9961): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107650.398:9962): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107650.461:9963): pid=69987 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107650.461:9964): pid=69987 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6867686C6E636663726D6E6663707275786C62746D6B6E72666970736F7061203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107650.462:9965): pid=69987 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107650.464:9966): pid=69987 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107650.635:9967): pid=69987 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107650.636:9968): pid=69987 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107650.639:9969): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107650.639:9970): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107650.665:9971): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107650.665:9972): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107650.724:9973): pid=70003 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107650.724:9974): pid=70003 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6575637664736F6E736B737972656F66646A6B676764696C777A68686B6E75203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107650.725:9975): pid=70003 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107650.729:9976): pid=70003 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107650.915:9977): pid=70003 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107650.915:9978): pid=70003 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107650.919:9979): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107650.919:9980): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107650.947:9981): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107650.947:9982): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107651.009:9983): pid=70019 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107651.009:9984): pid=70019 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B756B6D6571707A7A6173746C6E6B716A736E6C727A6F756B646E67717A6C76203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107651.010:9985): pid=70019 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107651.013:9986): pid=70019 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107651.197:9987): pid=70019 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107651.197:9988): pid=70019 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107651.201:9989): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107651.201:9990): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107651.229:9991): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107651.229:9992): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107651.287:9993): pid=70043 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107651.287:9994): pid=70043 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65656F757A6C65727A766173727075766F68786D6A746A6D6A7A616E6A6C676C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107651.288:9995): pid=70043 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107651.291:9996): pid=70043 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107651.465:9997): pid=70043 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107651.465:9998): pid=70043 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107651.469:9999): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107651.469:10000): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107651.493:10001): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107651.493:10002): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107651.524:10003): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107651.524:10004): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107651.546:10005): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107651.546:10006): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107651.584:10007): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107651.584:10008): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107651.786:10009): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107651.786:10010): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107651.826:10011): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107651.826:10012): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107651.847:10013): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107651.847:10014): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107651.903:10015): pid=70186 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107651.903:10016): pid=70186 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777268627373676C6468777A61717870726C617A737679797862786877776F70203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107651.904:10017): pid=70186 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107651.907:10018): pid=70186 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107652.076:10019): pid=70186 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107652.076:10020): pid=70186 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107652.081:10021): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107652.081:10022): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107652.268:10023): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107652.268:10024): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107652.300:10025): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107652.300:10026): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107652.321:10027): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107652.321:10028): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107652.373:10029): pid=70264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107652.374:10030): pid=70264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7162627A75687170787473717A64717A706870716A777A6E696374747972716B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107652.374:10031): pid=70264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107652.377:10032): pid=70264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107652.549:10033): pid=70264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107652.549:10034): pid=70264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107652.552:10035): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107652.552:10036): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107652.712:10037): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107652.712:10038): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107652.746:10039): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107652.746:10040): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107652.768:10041): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107652.768:10042): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107652.803:10043): pid=70319 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107652.803:10044): pid=70319 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A67706C766B6D7771707974697768786C6A66636F73646D79726F6A6972716A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107652.803:10045): pid=70319 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107652.805:10046): pid=70319 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107652.951:10047): pid=70319 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107652.952:10048): pid=70319 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107652.955:10049): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107652.955:10050): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107653.147:10051): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107653.147:10052): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107653.178:10053): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107653.178:10054): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107653.202:10055): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107653.202:10056): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107653.257:10057): pid=70412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107653.257:10058): pid=70412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76756F6D61676D617A6879766869787166707574747275716F656B736D636266203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107653.258:10059): pid=70412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107653.260:10060): pid=70412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107653.441:10061): pid=70412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107653.441:10062): pid=70412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107653.445:10063): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107653.445:10064): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107653.652:10065): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107653.652:10066): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107653.688:10067): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107653.688:10068): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107653.718:10069): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107653.718:10070): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107653.782:10071): pid=70441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107653.782:10072): pid=70441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6769636F656F6C766B676272757561777373786D746F77636D666D69636F7873203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107653.783:10073): pid=70441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107653.786:10074): pid=70441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107653.969:10075): pid=70441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107653.969:10076): pid=70441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107653.972:10077): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107653.972:10078): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107654.161:10079): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107654.161:10080): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107654.195:10081): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107654.196:10082): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107654.220:10083): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107654.220:10084): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107654.276:10085): pid=70478 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107654.276:10086): pid=70478 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7370786C6E727475746E69797A6D677668616D66707270716D746261726878203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107654.277:10087): pid=70478 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107654.279:10088): pid=70478 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107654.450:10089): pid=70478 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107654.450:10090): pid=70478 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107654.454:10091): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107654.454:10092): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107654.643:10093): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107654.643:10094): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107654.678:10095): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107654.678:10096): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107654.699:10097): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107654.699:10098): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107654.753:10099): pid=70507 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107654.753:10100): pid=70507 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6A6A72697178726A717169707371646765707A7A7672756F64776D74627366203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107654.753:10101): pid=70507 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107654.755:10102): pid=70507 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107654.925:10103): pid=70507 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107654.926:10104): pid=70507 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107654.929:10105): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107654.929:10106): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107655.124:10107): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107655.124:10108): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107655.164:10109): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107655.164:10110): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107655.190:10111): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107655.190:10112): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107655.254:10113): pid=70544 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107655.255:10114): pid=70544 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696D726A62686F676C796D776A74666B6A696964756667706C6176697769636A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107655.256:10115): pid=70544 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107655.259:10116): pid=70544 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107655.488:10117): pid=70544 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107655.488:10118): pid=70544 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107655.491:10119): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107655.492:10120): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107655.682:10121): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107655.682:10122): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107655.721:10123): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107655.722:10124): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107655.746:10125): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107655.746:10126): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107655.802:10127): pid=70573 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107655.802:10128): pid=70573 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726F756E716D66716579616D786A7975767268616B64667A7A627A6E796C726D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107655.802:10129): pid=70573 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107655.805:10130): pid=70573 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107655.985:10131): pid=70573 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107655.986:10132): pid=70573 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107655.989:10133): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107655.990:10134): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107656.011:10135): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107656.011:10136): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107656.070:10137): pid=70589 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107656.070:10138): pid=70589 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617A6970696C7778786C656874666F76656171636A6563737365766979797472203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107656.070:10139): pid=70589 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107656.072:10140): pid=70589 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107656.602:10141): prog-id=559 op=LOAD type=BPF msg=audit(1770107656.602:10142): prog-id=560 op=LOAD type=BPF msg=audit(1770107656.602:10143): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107656.602:10144): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107656.603:10145): prog-id=561 op=LOAD type=BPF msg=audit(1770107656.603:10146): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107656.604:10147): prog-id=562 op=LOAD type=BPF msg=audit(1770107656.604:10148): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107656.604:10149): prog-id=563 op=LOAD type=BPF msg=audit(1770107656.604:10150): prog-id=564 op=LOAD type=BPF msg=audit(1770107656.604:10151): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107656.604:10152): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107656.608:10153): prog-id=565 op=LOAD type=BPF msg=audit(1770107656.608:10154): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107656.608:10155): prog-id=566 op=LOAD type=BPF msg=audit(1770107656.608:10156): prog-id=567 op=LOAD type=BPF msg=audit(1770107656.608:10157): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107656.608:10158): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107656.611:10159): prog-id=568 op=LOAD type=BPF msg=audit(1770107656.611:10160): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107656.650:10161): pid=70589 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107656.650:10162): pid=70589 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107656.655:10163): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107656.655:10164): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRED_DISP msg=audit(1770107656.895:10165): pid=68123 uid=0 auid=0 ses=15 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1770107656.896:10166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107656.930:10167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107656.954:10168): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107656.954:10169): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107657.021:10170): pid=70768 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107657.022:10171): pid=70768 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72656E696A62726C786469646E66646B786A7369616967626D616467747A7067203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107657.023:10172): pid=70768 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107657.029:10173): pid=70768 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107657.631:10174): prog-id=569 op=LOAD type=BPF msg=audit(1770107657.631:10175): prog-id=570 op=LOAD type=BPF msg=audit(1770107657.631:10176): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107657.631:10177): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107657.632:10178): prog-id=571 op=LOAD type=BPF msg=audit(1770107657.632:10179): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107657.634:10180): prog-id=572 op=LOAD type=BPF msg=audit(1770107657.634:10181): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107657.634:10182): prog-id=573 op=LOAD type=BPF msg=audit(1770107657.634:10183): prog-id=574 op=LOAD type=BPF msg=audit(1770107657.634:10184): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107657.634:10185): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107657.637:10186): prog-id=575 op=LOAD type=BPF msg=audit(1770107657.637:10187): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107657.637:10188): prog-id=576 op=LOAD type=BPF msg=audit(1770107657.637:10189): prog-id=577 op=LOAD type=BPF msg=audit(1770107657.637:10190): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107657.637:10191): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107657.640:10192): prog-id=578 op=LOAD type=BPF msg=audit(1770107657.640:10193): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107657.734:10194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_collectd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107657.765:10195): pid=70768 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107657.766:10196): pid=70768 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107657.769:10197): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107657.769:10198): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107658.011:10199): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107658.011:10200): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107658.056:10201): pid=70944 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107658.056:10202): pid=70944 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736C776873666E75687175656F786B74747066677770657A6E7970697A697962203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107658.057:10203): pid=70944 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107658.062:10204): pid=70944 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107658.626:10205): prog-id=579 op=LOAD type=BPF msg=audit(1770107658.626:10206): prog-id=580 op=LOAD type=BPF msg=audit(1770107658.626:10207): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107658.626:10208): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107658.629:10209): prog-id=581 op=LOAD type=BPF msg=audit(1770107658.629:10210): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107658.633:10211): prog-id=582 op=LOAD type=BPF msg=audit(1770107658.633:10212): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107658.633:10213): prog-id=583 op=LOAD type=BPF msg=audit(1770107658.633:10214): prog-id=584 op=LOAD type=BPF msg=audit(1770107658.633:10215): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107658.633:10216): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107658.640:10217): prog-id=585 op=LOAD type=BPF msg=audit(1770107658.640:10218): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107658.641:10219): prog-id=586 op=LOAD type=BPF msg=audit(1770107658.641:10220): prog-id=587 op=LOAD type=BPF msg=audit(1770107658.641:10221): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107658.641:10222): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107658.647:10223): prog-id=588 op=LOAD type=BPF msg=audit(1770107658.647:10224): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107658.764:10225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107658.792:10226): pid=70944 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107658.792:10227): pid=70944 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107658.797:10228): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107658.797:10229): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107659.083:10230): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107659.084:10231): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107659.136:10232): pid=71029 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107659.136:10233): pid=71029 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726C676177686769726863686F6570656F65626E6D7278677266616A79656379203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107659.137:10234): pid=71029 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107659.142:10235): pid=71029 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107660.693:10236): prog-id=589 op=LOAD type=BPF msg=audit(1770107660.693:10237): prog-id=590 op=LOAD type=BPF msg=audit(1770107660.693:10238): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107660.693:10239): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107660.694:10240): prog-id=591 op=LOAD type=BPF msg=audit(1770107660.694:10241): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107660.696:10242): prog-id=592 op=LOAD type=BPF msg=audit(1770107660.696:10243): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107660.696:10244): prog-id=593 op=LOAD type=BPF msg=audit(1770107660.696:10245): prog-id=594 op=LOAD type=BPF msg=audit(1770107660.696:10246): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107660.696:10247): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107660.699:10248): prog-id=595 op=LOAD type=BPF msg=audit(1770107660.699:10249): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107660.699:10250): prog-id=596 op=LOAD type=BPF msg=audit(1770107660.699:10251): prog-id=597 op=LOAD type=BPF msg=audit(1770107660.699:10252): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107660.699:10253): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107660.702:10254): prog-id=598 op=LOAD type=BPF msg=audit(1770107660.702:10255): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107660.795:10256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtlogd_wrapper comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107660.825:10257): pid=71029 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107660.825:10258): pid=71029 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107660.829:10259): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107660.829:10260): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107661.085:10261): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107661.085:10262): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107661.140:10263): pid=71114 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107661.141:10264): pid=71114 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787572776A6978646A72767A71736E636F7A6D7A7371776263636F797973626B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107661.141:10265): pid=71114 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107661.146:10266): pid=71114 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107661.732:10267): prog-id=599 op=LOAD type=BPF msg=audit(1770107661.732:10268): prog-id=600 op=LOAD type=BPF msg=audit(1770107661.732:10269): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107661.732:10270): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107661.733:10271): prog-id=601 op=LOAD type=BPF msg=audit(1770107661.733:10272): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107661.735:10273): prog-id=602 op=LOAD type=BPF msg=audit(1770107661.735:10274): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107661.735:10275): prog-id=603 op=LOAD type=BPF msg=audit(1770107661.735:10276): prog-id=604 op=LOAD type=BPF msg=audit(1770107661.735:10277): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107661.735:10278): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107661.738:10279): prog-id=605 op=LOAD type=BPF msg=audit(1770107661.738:10280): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107661.738:10281): prog-id=606 op=LOAD type=BPF msg=audit(1770107661.738:10282): prog-id=607 op=LOAD type=BPF msg=audit(1770107661.738:10283): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107661.738:10284): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107661.741:10285): prog-id=608 op=LOAD type=BPF msg=audit(1770107661.741:10286): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107662.191:10287): prog-id=609 op=LOAD type=BPF msg=audit(1770107662.191:10288): prog-id=610 op=LOAD type=BPF msg=audit(1770107662.191:10289): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107662.191:10290): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107662.192:10291): prog-id=611 op=LOAD type=BPF msg=audit(1770107662.192:10292): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107662.194:10293): prog-id=612 op=LOAD type=BPF msg=audit(1770107662.194:10294): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107662.194:10295): prog-id=613 op=LOAD type=BPF msg=audit(1770107662.194:10296): prog-id=614 op=LOAD type=BPF msg=audit(1770107662.194:10297): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107662.194:10298): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107662.197:10299): prog-id=615 op=LOAD type=BPF msg=audit(1770107662.197:10300): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107662.197:10301): prog-id=616 op=LOAD type=BPF msg=audit(1770107662.197:10302): prog-id=617 op=LOAD type=BPF msg=audit(1770107662.197:10303): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107662.197:10304): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107662.201:10305): prog-id=618 op=LOAD type=BPF msg=audit(1770107662.201:10306): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107662.212:10307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtnodedevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107662.245:10308): pid=71114 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107662.245:10309): pid=71114 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107662.250:10310): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107662.250:10311): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1770107662.515:10312): pid=71364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=71364 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107662.529:10313): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107662.529:10314): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107662.582:10315): pid=71378 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107662.582:10316): pid=71378 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687871687068776F7571626E7761766C6D79726B7961647664666C616A68636A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107662.584:10317): pid=71378 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107662.589:10318): pid=71378 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107663.098:10319): prog-id=619 op=LOAD type=BPF msg=audit(1770107663.098:10320): prog-id=620 op=LOAD type=BPF msg=audit(1770107663.098:10321): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107663.098:10322): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107663.099:10323): prog-id=621 op=LOAD type=BPF msg=audit(1770107663.099:10324): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107663.101:10325): prog-id=622 op=LOAD type=BPF msg=audit(1770107663.101:10326): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107663.101:10327): prog-id=623 op=LOAD type=BPF msg=audit(1770107663.101:10328): prog-id=624 op=LOAD type=BPF msg=audit(1770107663.101:10329): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107663.101:10330): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107663.104:10331): prog-id=625 op=LOAD type=BPF msg=audit(1770107663.104:10332): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107663.104:10333): prog-id=626 op=LOAD type=BPF msg=audit(1770107663.104:10334): prog-id=627 op=LOAD type=BPF msg=audit(1770107663.104:10335): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107663.104:10336): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107663.108:10337): prog-id=628 op=LOAD type=BPF msg=audit(1770107663.108:10338): prog-id=0 op=UNLOAD type=CRYPTO_SESSION msg=audit(1770107663.229:10339): pid=71363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=71364 suid=74 rport=34272 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107663.229:10340): pid=71363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=71364 suid=74 rport=34272 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=BPF msg=audit(1770107663.601:10341): prog-id=629 op=LOAD type=BPF msg=audit(1770107663.601:10342): prog-id=630 op=LOAD type=BPF msg=audit(1770107663.601:10343): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107663.601:10344): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107663.602:10345): prog-id=631 op=LOAD type=BPF msg=audit(1770107663.602:10346): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107663.604:10347): prog-id=632 op=LOAD type=BPF msg=audit(1770107663.604:10348): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107663.604:10349): prog-id=633 op=LOAD type=BPF msg=audit(1770107663.604:10350): prog-id=634 op=LOAD type=BPF msg=audit(1770107663.604:10351): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107663.604:10352): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107663.607:10353): prog-id=635 op=LOAD type=BPF msg=audit(1770107663.607:10354): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107663.607:10355): prog-id=636 op=LOAD type=BPF msg=audit(1770107663.607:10356): prog-id=637 op=LOAD type=BPF msg=audit(1770107663.607:10357): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107663.607:10358): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107663.610:10359): prog-id=638 op=LOAD type=BPF msg=audit(1770107663.610:10360): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107663.621:10361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtproxyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107663.653:10362): pid=71378 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107663.654:10363): pid=71378 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107663.658:10364): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107663.658:10365): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107663.919:10366): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107663.919:10367): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107663.984:10368): pid=71589 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107663.984:10369): pid=71589 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676F6B616A736C6D6E66646A79676B687962636E7379737866626C75616D7570203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107663.985:10370): pid=71589 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107663.989:10371): pid=71589 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107664.568:10372): prog-id=639 op=LOAD type=BPF msg=audit(1770107664.568:10373): prog-id=640 op=LOAD type=BPF msg=audit(1770107664.568:10374): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107664.568:10375): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107664.569:10376): prog-id=641 op=LOAD type=BPF msg=audit(1770107664.569:10377): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107664.570:10378): prog-id=642 op=LOAD type=BPF msg=audit(1770107664.570:10379): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107664.570:10380): prog-id=643 op=LOAD type=BPF msg=audit(1770107664.571:10381): prog-id=644 op=LOAD type=BPF msg=audit(1770107664.571:10382): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107664.571:10383): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107664.574:10384): prog-id=645 op=LOAD type=BPF msg=audit(1770107664.574:10385): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107664.574:10386): prog-id=646 op=LOAD type=BPF msg=audit(1770107664.574:10387): prog-id=647 op=LOAD type=BPF msg=audit(1770107664.574:10388): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107664.574:10389): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107664.577:10390): prog-id=648 op=LOAD type=BPF msg=audit(1770107664.577:10391): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107664.972:10392): prog-id=649 op=LOAD type=BPF msg=audit(1770107664.972:10393): prog-id=650 op=LOAD type=BPF msg=audit(1770107664.972:10394): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107664.972:10395): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107664.973:10396): prog-id=651 op=LOAD type=BPF msg=audit(1770107664.973:10397): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107664.975:10398): prog-id=652 op=LOAD type=BPF msg=audit(1770107664.975:10399): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107664.975:10400): prog-id=653 op=LOAD type=BPF msg=audit(1770107664.975:10401): prog-id=654 op=LOAD type=BPF msg=audit(1770107664.975:10402): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107664.975:10403): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107664.978:10404): prog-id=655 op=LOAD type=BPF msg=audit(1770107664.978:10405): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107664.978:10406): prog-id=656 op=LOAD type=BPF msg=audit(1770107664.978:10407): prog-id=657 op=LOAD type=BPF msg=audit(1770107664.978:10408): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107664.978:10409): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107664.981:10410): prog-id=658 op=LOAD type=BPF msg=audit(1770107664.981:10411): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107664.992:10412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107665.025:10413): pid=71589 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107665.025:10414): pid=71589 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107665.031:10415): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107665.031:10416): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1770107665.059:10417): pid=71711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=71711 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107665.327:10418): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107665.327:10419): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107665.374:10420): pid=71725 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107665.374:10421): pid=71725 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B77757A61656D7776636E65646261626264636262637A73706A6C6568646976203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107665.375:10422): pid=71725 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107665.380:10423): pid=71725 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107665.955:10424): prog-id=659 op=LOAD type=BPF msg=audit(1770107665.955:10425): prog-id=660 op=LOAD type=BPF msg=audit(1770107665.955:10426): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107665.955:10427): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107665.956:10428): prog-id=661 op=LOAD type=BPF msg=audit(1770107665.956:10429): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107665.958:10430): prog-id=662 op=LOAD type=BPF msg=audit(1770107665.958:10431): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107665.958:10432): prog-id=663 op=LOAD type=BPF msg=audit(1770107665.958:10433): prog-id=664 op=LOAD type=BPF msg=audit(1770107665.958:10434): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107665.958:10435): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107665.962:10436): prog-id=665 op=LOAD type=BPF msg=audit(1770107665.962:10437): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107665.962:10438): prog-id=666 op=LOAD type=BPF msg=audit(1770107665.962:10439): prog-id=667 op=LOAD type=BPF msg=audit(1770107665.962:10440): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107665.962:10441): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107665.965:10442): prog-id=668 op=LOAD type=BPF msg=audit(1770107665.965:10443): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107665.977:10444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107666.131:10445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107666.512:10446): prog-id=669 op=LOAD type=BPF msg=audit(1770107666.512:10447): prog-id=670 op=LOAD type=BPF msg=audit(1770107666.512:10448): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107666.512:10449): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107666.513:10450): prog-id=671 op=LOAD type=BPF msg=audit(1770107666.513:10451): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107666.515:10452): prog-id=672 op=LOAD type=BPF msg=audit(1770107666.515:10453): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107666.515:10454): prog-id=673 op=LOAD type=BPF msg=audit(1770107666.515:10455): prog-id=674 op=LOAD type=BPF msg=audit(1770107666.515:10456): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107666.515:10457): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107666.518:10458): prog-id=675 op=LOAD type=BPF msg=audit(1770107666.518:10459): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107666.518:10460): prog-id=676 op=LOAD type=BPF msg=audit(1770107666.518:10461): prog-id=677 op=LOAD type=BPF msg=audit(1770107666.518:10462): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107666.518:10463): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107666.522:10464): prog-id=678 op=LOAD type=BPF msg=audit(1770107666.522:10465): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107666.534:10466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtsecretd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107666.565:10467): pid=71725 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107666.566:10468): pid=71725 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107666.569:10469): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107666.569:10470): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107666.844:10471): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107666.844:10472): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107666.901:10473): pid=71939 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107666.902:10474): pid=71939 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7176676B696674696C6965776D6E6B6272777A62746F62767368656C61736A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107666.902:10475): pid=71939 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107666.907:10476): pid=71939 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107667.460:10477): prog-id=679 op=LOAD type=BPF msg=audit(1770107667.460:10478): prog-id=680 op=LOAD type=BPF msg=audit(1770107667.460:10479): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107667.460:10480): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107667.461:10481): prog-id=681 op=LOAD type=BPF msg=audit(1770107667.461:10482): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107667.463:10483): prog-id=682 op=LOAD type=BPF msg=audit(1770107667.463:10484): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107667.463:10485): prog-id=683 op=LOAD type=BPF msg=audit(1770107667.463:10486): prog-id=684 op=LOAD type=BPF msg=audit(1770107667.463:10487): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107667.463:10488): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107667.466:10489): prog-id=685 op=LOAD type=BPF msg=audit(1770107667.466:10490): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107667.466:10491): prog-id=686 op=LOAD type=BPF msg=audit(1770107667.466:10492): prog-id=687 op=LOAD type=BPF msg=audit(1770107667.466:10493): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107667.466:10494): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107667.470:10495): prog-id=688 op=LOAD type=BPF msg=audit(1770107667.470:10496): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107667.989:10497): prog-id=689 op=LOAD type=BPF msg=audit(1770107667.989:10498): prog-id=690 op=LOAD type=BPF msg=audit(1770107667.989:10499): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107667.989:10500): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107667.990:10501): prog-id=691 op=LOAD type=BPF msg=audit(1770107667.990:10502): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107667.992:10503): prog-id=692 op=LOAD type=BPF msg=audit(1770107667.992:10504): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107667.992:10505): prog-id=693 op=LOAD type=BPF msg=audit(1770107667.992:10506): prog-id=694 op=LOAD type=BPF msg=audit(1770107667.992:10507): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107667.992:10508): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107667.995:10509): prog-id=695 op=LOAD type=BPF msg=audit(1770107667.995:10510): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107667.995:10511): prog-id=696 op=LOAD type=BPF msg=audit(1770107667.995:10512): prog-id=697 op=LOAD type=BPF msg=audit(1770107667.995:10513): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107667.995:10514): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107667.999:10515): prog-id=698 op=LOAD type=BPF msg=audit(1770107667.999:10516): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107668.010:10517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtstoraged comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107668.041:10518): pid=71939 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107668.041:10519): pid=71939 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107668.045:10520): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107668.045:10521): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107668.318:10522): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107668.318:10523): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107668.380:10524): pid=72069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107668.380:10525): pid=72069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C796D74686B736667756D65797861667465706D61737A7179647272646D706C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107668.381:10526): pid=72069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107668.399:10527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770107668.402:10528): pid=72069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107668.538:10529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107669.023:10530): prog-id=699 op=LOAD type=BPF msg=audit(1770107669.023:10531): prog-id=700 op=LOAD type=BPF msg=audit(1770107669.023:10532): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107669.023:10533): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107669.024:10534): prog-id=701 op=LOAD type=BPF msg=audit(1770107669.024:10535): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107669.026:10536): prog-id=702 op=LOAD type=BPF msg=audit(1770107669.026:10537): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107669.026:10538): prog-id=703 op=LOAD type=BPF msg=audit(1770107669.026:10539): prog-id=704 op=LOAD type=BPF msg=audit(1770107669.026:10540): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107669.026:10541): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107669.029:10542): prog-id=705 op=LOAD type=BPF msg=audit(1770107669.029:10543): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107669.029:10544): prog-id=706 op=LOAD type=BPF msg=audit(1770107669.029:10545): prog-id=707 op=LOAD type=BPF msg=audit(1770107669.029:10546): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107669.029:10547): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107669.033:10548): prog-id=708 op=LOAD type=BPF msg=audit(1770107669.033:10549): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107669.191:10550): prog-id=709 op=LOAD type=SYSCALL msg=audit(1770107669.191:10550): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fffb6db5450 a2=90 a3=9500000001 items=0 ppid=72173 pid=72174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107669.191:10550): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633762613361643635313162653834316264626239666135643730383636 type=SERVICE_START msg=audit(1770107669.226:10551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770107669.237:10552): pid=72206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1770107669.238:10553): pid=72206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1770107669.239:10554): pid=72206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770107669.241:10555): pid=72206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107669.248:10556): pid=72069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107669.248:10557): pid=72069 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107669.252:10558): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107669.252:10559): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107669.289:10560): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107669.289:10561): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107669.309:10562): pid=72206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1770107669.309:10563): pid=72206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107669.322:10564): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107669.322:10565): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=BPF msg=audit(1770107669.345:10566): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1770107669.434:10567): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107669.434:10568): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107669.497:10569): pid=72259 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107669.497:10570): pid=72259 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6169646A65756178786F796174686275676A6E6964796A6E6E656A6963637673203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107669.498:10571): pid=72259 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107669.503:10572): pid=72259 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107669.509:10573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107669.629:10574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107669.629:10575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107669.667:10576): pid=72259 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107669.667:10577): pid=72259 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107669.673:10578): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107669.673:10579): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=BPF msg=audit(1770107669.730:10580): prog-id=710 op=LOAD type=SYSCALL msg=audit(1770107669.730:10580): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffcbf919b30 a2=90 a3=9500000001 items=0 ppid=72289 pid=72290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107669.730:10580): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633762613361643635313162653834316264626239666135643730383636 type=SERVICE_START msg=audit(1770107669.758:10581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770107669.767:10582): pid=72294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1770107669.767:10583): pid=72294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1770107669.768:10584): pid=72294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770107669.770:10585): pid=72294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107669.809:10586): pid=72294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1770107669.810:10587): pid=72294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107669.833:10588): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1770107669.993:10589): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107669.993:10590): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107669.997:10591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1770107670.024:10592): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107670.024:10593): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107670.043:10594): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107670.043:10595): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107670.080:10596): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107670.080:10597): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107670.105:10598): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107670.105:10599): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1770107670.130:10600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107670.130:10601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770107670.167:10602): pid=72411 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107670.167:10603): pid=72411 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616E667769796E6A6E766C7A716C697968786B75756970686865686863626D70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107670.169:10604): pid=72411 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107670.173:10605): pid=72411 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107670.262:10606): prog-id=711 op=LOAD type=SYSCALL msg=audit(1770107670.262:10606): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffcb0eae540 a2=90 a3=9500000001 items=0 ppid=72483 pid=72484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107670.262:10606): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633762613361643635313162653834316264626239666135643730383636 type=SERVICE_START msg=audit(1770107670.285:10607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770107670.298:10608): pid=72488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1770107670.298:10609): pid=72488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1770107670.299:10610): pid=72488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770107670.300:10611): pid=72488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107670.330:10612): pid=72411 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107670.330:10613): pid=72411 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107670.333:10614): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107670.333:10615): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107670.355:10616): pid=72488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1770107670.356:10617): pid=72488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107670.360:10618): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107670.360:10619): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=BPF msg=audit(1770107670.391:10620): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107670.393:10621): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107670.393:10622): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107670.414:10623): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107670.414:10624): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107670.443:10625): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107670.443:10626): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107670.465:10627): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107670.465:10628): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107670.525:10629): pid=72549 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107670.525:10630): pid=72549 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B786469666A61736A6567736176666D77646E6C77677268736578626B706872203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107670.525:10631): pid=72549 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107670.527:10632): pid=72549 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107670.562:10633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1770107670.701:10634): pid=72549 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107670.702:10635): pid=72549 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107670.705:10636): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107670.705:10637): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107670.726:10638): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107670.726:10639): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107670.761:10640): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107670.761:10641): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107670.879:10642): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107670.879:10643): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1770107670.880:10644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107670.880:10645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770107670.947:10646): pid=72656 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107670.947:10647): pid=72656 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A776867666D71776165757A7173636B72736779727264766A68656262647779203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107670.948:10648): pid=72656 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107670.952:10649): pid=72656 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107671.005:10650): prog-id=712 op=LOAD type=SYSCALL msg=audit(1770107671.005:10650): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffeb7886330 a2=90 a3=9500000001 items=0 ppid=72665 pid=72666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107671.005:10650): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633762613361643635313162653834316264626239666135643730383636 type=SERVICE_START msg=audit(1770107671.034:10651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770107671.039:10652): pid=72672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1770107671.039:10653): pid=72672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1770107671.039:10654): pid=72672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770107671.040:10655): pid=72672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107671.097:10656): pid=72672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1770107671.097:10657): pid=72672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107671.131:10658): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107671.159:10659): pid=72656 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107671.159:10660): pid=72656 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107671.161:10661): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107671.161:10662): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107671.251:10663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107671.380:10664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107671.380:10665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107671.458:10666): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107671.458:10667): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107671.519:10668): pid=72740 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107671.519:10669): pid=72740 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706D646A62766F6D74786671797A6B64717062656A6C777A6F70756378736A70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107671.520:10670): pid=72740 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107671.528:10671): prog-id=713 op=LOAD type=SYSCALL msg=audit(1770107671.528:10671): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe1bb5c270 a2=90 a3=9500000001 items=0 ppid=72738 pid=72739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107671.528:10671): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633762613361643635313162653834316264626239666135643730383636 type=USER_START msg=audit(1770107671.530:10672): pid=72740 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107671.557:10673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770107671.564:10674): pid=72747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1770107671.564:10675): pid=72747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1770107671.565:10676): pid=72747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770107671.566:10677): pid=72747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107671.612:10678): pid=72747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1770107671.612:10679): pid=72747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107671.641:10680): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107671.709:10681): pid=72740 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107671.710:10682): pid=72740 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107671.715:10683): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107671.715:10684): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107671.785:10685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107671.821:10686): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107671.821:10687): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107671.890:10688): pid=72878 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107671.890:10689): pid=72878 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747873696C7A70676C7166736F6E63707A6661746F6371626C61627876747378203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107671.891:10690): pid=72878 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107671.894:10691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107671.894:10692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770107671.897:10693): pid=72878 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107672.099:10694): pid=72878 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107672.099:10695): pid=72878 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107672.103:10696): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107672.103:10697): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107672.712:10698): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107672.712:10699): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107672.744:10700): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107672.744:10701): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107672.769:10702): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107672.769:10703): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107672.803:10704): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107672.803:10705): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107672.828:10706): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107672.828:10707): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107672.887:10708): pid=72975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107672.887:10709): pid=72975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6E6377796763616A61757970776B75777765676A6171797466617067667772203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107672.888:10710): pid=72975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107672.891:10711): pid=72975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107673.073:10712): pid=72975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107673.073:10713): pid=72975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107673.077:10714): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107673.077:10715): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107673.106:10716): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107673.106:10717): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107673.133:10718): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107673.133:10719): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107673.151:10720): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107673.151:10721): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107673.176:10722): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107673.176:10723): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107673.197:10724): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107673.197:10725): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107673.243:10726): pid=73102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107673.243:10727): pid=73102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7269667A6A6C656E6171767873636E6E6B62766B636D6D636273707061616666203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107673.244:10728): pid=73102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107673.246:10729): pid=73102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107673.437:10730): pid=73102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107673.438:10731): pid=73102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107673.442:10732): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107673.442:10733): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107673.468:10734): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107673.469:10735): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107673.494:10736): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107673.494:10737): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107673.732:10738): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107673.733:10739): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107673.763:10740): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107673.763:10741): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107673.784:10742): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107673.784:10743): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107673.822:10744): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107673.823:10745): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107673.847:10746): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107673.847:10747): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107673.910:10748): pid=73172 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107673.910:10749): pid=73172 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72786D7A7162646475677973717663617173736D667668626E6E74616A637A6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107673.911:10750): pid=73172 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107673.914:10751): pid=73172 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107673.929:10752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107674.084:10753): pid=73172 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107674.085:10754): pid=73172 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107674.088:10755): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107674.088:10756): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107674.116:10757): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107674.116:10758): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107674.142:10759): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107674.143:10760): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107674.161:10761): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107674.161:10762): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107674.182:10763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107674.182:10764): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107674.182:10765): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107674.202:10766): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107674.202:10767): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107674.248:10768): pid=73244 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107674.248:10769): pid=73244 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64666B656C786E626C63676D656367636775707275767478787865636170776F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107674.249:10770): pid=73244 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107674.253:10771): pid=73244 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107674.439:10772): pid=73244 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107674.439:10773): pid=73244 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107674.443:10774): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107674.443:10775): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107674.458:10776): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107674.459:10777): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107674.484:10778): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107674.484:10779): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107674.569:10780): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107674.569:10781): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107674.599:10782): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107674.599:10783): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107674.619:10784): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107674.619:10785): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107674.655:10786): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107674.655:10787): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107674.680:10788): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107674.680:10789): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107674.744:10790): pid=73306 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107674.744:10791): pid=73306 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E776B6C6E6875736264786474726D6676716264616F7176636D79776C657973203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107674.745:10792): pid=73306 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107674.749:10793): pid=73306 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107674.901:10794): pid=73306 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107674.901:10795): pid=73306 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107674.905:10796): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107674.905:10797): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107674.931:10798): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107674.931:10799): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107674.962:10800): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107674.962:10801): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107674.982:10802): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107674.982:10803): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107675.008:10804): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107675.008:10805): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107675.033:10806): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107675.033:10807): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107675.069:10808): pid=73357 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107675.069:10809): pid=73357 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6F6670786C78687070716C786769756E64676C67656F676174726F6C7A7668203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107675.070:10810): pid=73357 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107675.071:10811): pid=73357 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107675.213:10812): pid=73357 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107675.213:10813): pid=73357 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107675.217:10814): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107675.217:10815): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1770107675.222:10816): pid=71363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=71364 suid=74 rport=34272 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107675.222:10817): pid=71363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=71364 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107675.224:10818): pid=71363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107675.224:10819): pid=71363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=71363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107675.224:10820): pid=71363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107675.230:10821): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107675.231:10822): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107675.260:10823): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107675.260:10824): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107675.348:10825): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107675.349:10826): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107675.374:10827): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107675.374:10828): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107675.397:10829): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107675.397:10830): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107675.428:10831): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107675.428:10832): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107675.452:10833): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107675.452:10834): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107675.507:10835): pid=73419 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107675.508:10836): pid=73419 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75616867746E78706D71666F777161796666637170746E7975656F6A6F67697A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107675.508:10837): pid=73419 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107675.511:10838): pid=73419 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107675.674:10839): pid=73419 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107675.675:10840): pid=73419 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107675.677:10841): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107675.677:10842): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107675.702:10843): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107675.702:10844): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107675.732:10845): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107675.732:10846): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107675.754:10847): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107675.754:10848): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107675.785:10849): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107675.785:10850): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107675.809:10851): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107675.810:10852): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107675.860:10853): pid=73470 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107675.860:10854): pid=73470 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696A766B6B6478736871646574616373726E706778746E646E766C736568697A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107675.860:10855): pid=73470 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107675.862:10856): pid=73470 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107676.039:10857): pid=73470 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107676.040:10858): pid=73470 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107676.044:10859): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107676.044:10860): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107676.065:10861): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107676.065:10862): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107676.093:10863): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107676.093:10864): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107676.201:10865): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107676.201:10866): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107676.265:10867): pid=73500 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107676.266:10868): pid=73500 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E70737661786C72666E78616A73647371656667736574756D61646F68746B63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107676.266:10869): pid=73500 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107676.269:10870): pid=73500 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107676.806:10871): prog-id=714 op=LOAD type=BPF msg=audit(1770107676.806:10872): prog-id=715 op=LOAD type=BPF msg=audit(1770107676.806:10873): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107676.806:10874): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107676.807:10875): prog-id=716 op=LOAD type=BPF msg=audit(1770107676.807:10876): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107676.809:10877): prog-id=717 op=LOAD type=BPF msg=audit(1770107676.809:10878): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107676.809:10879): prog-id=718 op=LOAD type=BPF msg=audit(1770107676.809:10880): prog-id=719 op=LOAD type=BPF msg=audit(1770107676.809:10881): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107676.809:10882): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107676.813:10883): prog-id=720 op=LOAD type=BPF msg=audit(1770107676.813:10884): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107676.813:10885): prog-id=721 op=LOAD type=BPF msg=audit(1770107676.813:10886): prog-id=722 op=LOAD type=BPF msg=audit(1770107676.813:10887): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107676.813:10888): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107676.816:10889): prog-id=723 op=LOAD type=BPF msg=audit(1770107676.816:10890): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107677.113:10891): prog-id=724 op=LOAD type=BPF msg=audit(1770107677.113:10892): prog-id=725 op=LOAD type=BPF msg=audit(1770107677.113:10893): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107677.113:10894): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107677.114:10895): prog-id=726 op=LOAD type=BPF msg=audit(1770107677.114:10896): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107677.116:10897): prog-id=727 op=LOAD type=BPF msg=audit(1770107677.116:10898): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107677.116:10899): prog-id=728 op=LOAD type=BPF msg=audit(1770107677.116:10900): prog-id=729 op=LOAD type=BPF msg=audit(1770107677.116:10901): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107677.116:10902): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107677.119:10903): prog-id=730 op=LOAD type=BPF msg=audit(1770107677.119:10904): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107677.119:10905): prog-id=731 op=LOAD type=BPF msg=audit(1770107677.119:10906): prog-id=732 op=LOAD type=BPF msg=audit(1770107677.119:10907): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107677.119:10908): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107677.123:10909): prog-id=733 op=LOAD type=BPF msg=audit(1770107677.123:10910): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107677.162:10911): pid=73500 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107677.162:10912): pid=73500 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107677.167:10913): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107677.167:10914): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107677.276:10915): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107677.276:10916): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107677.335:10917): pid=73719 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107677.336:10918): pid=73719 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A666373616B7875676F776A65626772687063616B7A686E676D756875736C6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107677.337:10919): pid=73719 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107677.347:10920): pid=73719 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107677.896:10921): prog-id=734 op=LOAD type=BPF msg=audit(1770107677.896:10922): prog-id=735 op=LOAD type=BPF msg=audit(1770107677.896:10923): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107677.896:10924): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107677.897:10925): prog-id=736 op=LOAD type=BPF msg=audit(1770107677.897:10926): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107677.899:10927): prog-id=737 op=LOAD type=BPF msg=audit(1770107677.899:10928): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107677.899:10929): prog-id=738 op=LOAD type=BPF msg=audit(1770107677.899:10930): prog-id=739 op=LOAD type=BPF msg=audit(1770107677.899:10931): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107677.899:10932): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107677.902:10933): prog-id=740 op=LOAD type=BPF msg=audit(1770107677.902:10934): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107677.902:10935): prog-id=741 op=LOAD type=BPF msg=audit(1770107677.903:10936): prog-id=742 op=LOAD type=BPF msg=audit(1770107677.903:10937): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107677.903:10938): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107677.906:10939): prog-id=743 op=LOAD type=BPF msg=audit(1770107677.906:10940): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107678.161:10941): prog-id=744 op=LOAD type=BPF msg=audit(1770107678.161:10942): prog-id=745 op=LOAD type=BPF msg=audit(1770107678.161:10943): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107678.161:10944): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107678.162:10945): prog-id=746 op=LOAD type=BPF msg=audit(1770107678.162:10946): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107678.164:10947): prog-id=747 op=LOAD type=BPF msg=audit(1770107678.164:10948): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107678.164:10949): prog-id=748 op=LOAD type=BPF msg=audit(1770107678.164:10950): prog-id=749 op=LOAD type=BPF msg=audit(1770107678.164:10951): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107678.164:10952): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107678.167:10953): prog-id=750 op=LOAD type=BPF msg=audit(1770107678.167:10954): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107678.167:10955): prog-id=751 op=LOAD type=BPF msg=audit(1770107678.167:10956): prog-id=752 op=LOAD type=BPF msg=audit(1770107678.167:10957): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107678.167:10958): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107678.171:10959): prog-id=753 op=LOAD type=BPF msg=audit(1770107678.171:10960): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107678.209:10961): pid=73719 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107678.210:10962): pid=73719 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107678.213:10963): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107678.213:10964): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107678.317:10965): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107678.317:10966): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107678.377:10967): pid=73850 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107678.377:10968): pid=73850 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61627462717A61626A757A7A7561636F65786F67616C686D6B61636E6175616B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107678.378:10969): pid=73850 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107678.382:10970): pid=73850 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107678.844:10971): prog-id=754 op=LOAD type=BPF msg=audit(1770107678.844:10972): prog-id=755 op=LOAD type=BPF msg=audit(1770107678.844:10973): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107678.844:10974): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107678.845:10975): prog-id=756 op=LOAD type=BPF msg=audit(1770107678.845:10976): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107678.847:10977): prog-id=757 op=LOAD type=BPF msg=audit(1770107678.847:10978): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107678.847:10979): prog-id=758 op=LOAD type=BPF msg=audit(1770107678.847:10980): prog-id=759 op=LOAD type=BPF msg=audit(1770107678.847:10981): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107678.847:10982): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107678.850:10983): prog-id=760 op=LOAD type=BPF msg=audit(1770107678.850:10984): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107678.851:10985): prog-id=761 op=LOAD type=BPF msg=audit(1770107678.851:10986): prog-id=762 op=LOAD type=BPF msg=audit(1770107678.851:10987): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107678.851:10988): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107678.854:10989): prog-id=763 op=LOAD type=BPF msg=audit(1770107678.854:10990): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107678.878:10991): pid=73850 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107678.878:10992): pid=73850 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107678.883:10993): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107678.883:10994): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107678.993:10995): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107678.993:10996): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107679.023:10997): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107679.023:10998): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107679.048:10999): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107679.048:11000): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107679.088:11001): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107679.089:11002): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107679.122:11003): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107679.123:11004): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107679.186:11005): pid=73942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107679.186:11006): pid=73942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61687A6F6E6C68796E647969687175777978776C796C62647263617375776774203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107679.187:11007): pid=73942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107679.191:11008): pid=73942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107679.360:11009): pid=73942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107679.360:11010): pid=73942 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107679.364:11011): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107679.364:11012): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107679.398:11013): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107679.398:11014): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107679.432:11015): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107679.433:11016): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107679.463:11017): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107679.464:11018): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107679.490:11019): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107679.490:11020): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107679.520:11021): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107679.520:11022): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107679.573:11023): pid=73985 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107679.573:11024): pid=73985 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B70687A756E6F786D7079626863656E7477616763637A6F6E6A656D67656977203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107679.575:11025): pid=73985 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107679.578:11026): pid=73985 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107679.754:11027): pid=73985 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107679.754:11028): pid=73985 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107679.758:11029): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107679.758:11030): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107679.780:11031): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107679.780:11032): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107679.806:11033): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107679.806:11034): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107679.923:11035): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107679.923:11036): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107679.987:11037): pid=74025 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107679.987:11038): pid=74025 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62746F62746C65687179646474647266767362617A6C756B736D736B72756568203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107679.988:11039): pid=74025 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107679.992:11040): pid=74025 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107680.006:11041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107680.180:11042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107680.591:11043): prog-id=764 op=LOAD type=BPF msg=audit(1770107680.591:11044): prog-id=765 op=LOAD type=BPF msg=audit(1770107680.591:11045): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107680.591:11046): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107680.592:11047): prog-id=766 op=LOAD type=BPF msg=audit(1770107680.592:11048): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107680.593:11049): prog-id=767 op=LOAD type=BPF msg=audit(1770107680.593:11050): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107680.594:11051): prog-id=768 op=LOAD type=BPF msg=audit(1770107680.594:11052): prog-id=769 op=LOAD type=BPF msg=audit(1770107680.594:11053): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107680.594:11054): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107680.597:11055): prog-id=770 op=LOAD type=BPF msg=audit(1770107680.597:11056): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107680.597:11057): prog-id=771 op=LOAD type=BPF msg=audit(1770107680.597:11058): prog-id=772 op=LOAD type=BPF msg=audit(1770107680.597:11059): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107680.597:11060): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107680.600:11061): prog-id=773 op=LOAD type=BPF msg=audit(1770107680.600:11062): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107680.691:11063): pid=74025 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107680.692:11064): pid=74025 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107680.697:11065): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107680.697:11066): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107680.777:11067): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107680.777:11068): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107680.845:11069): pid=74117 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107680.846:11070): pid=74117 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76676E7063716D736F687A6774786577626D786A7563656F6D79786D6A746B72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107680.847:11071): pid=74117 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107680.852:11072): pid=74117 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107681.040:11073): pid=74117 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107681.040:11074): pid=74117 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107681.044:11075): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107681.044:11076): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107681.269:11077): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107681.269:11078): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107681.297:11079): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107681.297:11080): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107681.319:11081): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107681.319:11082): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107681.351:11083): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107681.351:11084): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107681.375:11085): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107681.375:11086): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107681.430:11087): pid=74175 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107681.430:11088): pid=74175 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756C6976667866707A6B7869666A7266746B666D6A78746D71726768786D6F76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107681.431:11089): pid=74175 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107681.434:11090): pid=74175 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107681.614:11091): pid=74175 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107681.614:11092): pid=74175 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107681.617:11093): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107681.618:11094): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107681.641:11095): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107681.641:11096): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107681.687:11097): pid=74193 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107681.687:11098): pid=74193 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66727574656D7474626E6B6C6D756D64616B73656361766472766A6A6F6A7967203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107681.688:11099): pid=74193 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107681.690:11100): pid=74193 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107681.849:11101): pid=74193 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107681.850:11102): pid=74193 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107681.853:11103): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107681.853:11104): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107681.872:11105): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107681.872:11106): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107681.898:11107): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107681.898:11108): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107682.008:11109): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107682.008:11110): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107682.034:11111): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107682.034:11112): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107682.059:11113): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107682.059:11114): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107682.090:11115): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107682.090:11116): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107682.120:11117): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107682.120:11118): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107682.150:11119): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107682.150:11120): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107682.183:11121): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107682.183:11122): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107682.220:11123): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107682.220:11124): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107682.241:11125): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107682.241:11126): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107682.270:11127): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107682.270:11128): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107682.294:11129): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107682.294:11130): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107682.356:11131): pid=74436 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107682.356:11132): pid=74436 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107682.357:11133): pid=74436 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107682.360:11134): pid=74436 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107682.544:11135): pid=74436 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107682.544:11136): pid=74436 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107682.548:11137): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107682.549:11138): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107682.633:11139): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107682.633:11140): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107682.698:11141): pid=74528 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107682.698:11142): pid=74528 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666F64627464776A61707979746C6C6675667871686D77636F786E6862697A79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107682.698:11143): pid=74528 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107682.700:11144): pid=74528 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107682.877:11145): pid=74528 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107682.877:11146): pid=74528 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107682.880:11147): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107682.880:11148): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_SESSION msg=audit(1770107689.828:11149): pid=71710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=71711 suid=74 rport=34286 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107689.828:11150): pid=71710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=71711 suid=74 rport=34286 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107690.469:11151): pid=75010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=75010 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107692.943:11152): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107692.943:11153): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107693.002:11154): pid=75181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107693.002:11155): pid=75181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717067616275616866616A637268766B78757465766C63626A72706E716F7269203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107693.003:11156): pid=75181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107693.007:11157): pid=75181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107693.175:11158): pid=75181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107693.175:11159): pid=75181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107693.179:11160): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107693.179:11161): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1770107694.608:11162): pid=71710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=71711 suid=74 rport=34286 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107694.609:11163): pid=71710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=71711 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107694.609:11164): pid=71710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107694.610:11165): pid=71710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=71710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107694.610:11166): pid=71710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107697.092:11167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107697.217:11168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107697.374:11169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r2e00b3143a224251a33bcb2165b4e4b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107697.694:11170): prog-id=774 op=LOAD type=BPF msg=audit(1770107697.694:11171): prog-id=775 op=LOAD type=BPF msg=audit(1770107697.694:11172): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107697.694:11173): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107697.695:11174): prog-id=776 op=LOAD type=BPF msg=audit(1770107697.696:11175): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107697.697:11176): prog-id=777 op=LOAD type=BPF msg=audit(1770107697.697:11177): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107697.697:11178): prog-id=778 op=LOAD type=BPF msg=audit(1770107697.697:11179): prog-id=779 op=LOAD type=BPF msg=audit(1770107697.697:11180): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107697.697:11181): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107697.701:11182): prog-id=780 op=LOAD type=BPF msg=audit(1770107697.701:11183): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107697.701:11184): prog-id=781 op=LOAD type=BPF msg=audit(1770107697.701:11185): prog-id=782 op=LOAD type=BPF msg=audit(1770107697.701:11186): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107697.701:11187): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107697.704:11188): prog-id=783 op=LOAD type=BPF msg=audit(1770107697.704:11189): prog-id=0 op=UNLOAD type=SOFTWARE_UPDATE msg=audit(1770107697.734:11190): pid=75277 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Term-ReadLine-0:1.17-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107697.734:11191): pid=75277 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Copy-0:2.34-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107697.734:11192): pid=75277 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mariadb-connector-c-config-3.2.6-1.el9_0.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107697.734:11193): pid=75277 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mariadb-connector-c-3.2.6-1.el9_0.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107697.734:11194): pid=75277 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="net-snmp-agent-libs-1:5.9.1-11.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SOFTWARE_UPDATE msg=audit(1770107697.734:11195): pid=75277 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="net-snmp-1:5.9.1-11.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107697.851:11196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107697.852:11197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107697.854:11198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r2e00b3143a224251a33bcb2165b4e4b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770107698.080:11199): pid=75009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=75010 suid=74 rport=51964 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107698.080:11200): pid=75009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=75010 suid=74 rport=51964 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770107698.772:11201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107698.930:11202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107701.378:11203): pid=75009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=75010 suid=74 rport=51964 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107701.379:11204): pid=75009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=75010 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107701.380:11205): pid=75009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107701.380:11206): pid=75009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=75009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107701.380:11207): pid=75009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107703.243:11208): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107703.243:11209): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107703.311:11210): pid=76134 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107703.312:11211): pid=76134 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7670776F6B7763786C66706B776E66677772647A76636C716A75737A696565203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107703.313:11212): pid=76134 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107703.319:11213): pid=76134 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107703.487:11214): pid=76134 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107703.488:11215): pid=76134 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107703.492:11216): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107703.492:11217): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1770107705.140:11218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107705.426:11219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107705.831:11220): prog-id=784 op=LOAD type=BPF msg=audit(1770107705.831:11221): prog-id=785 op=LOAD type=BPF msg=audit(1770107705.831:11222): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107705.831:11223): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107705.832:11224): prog-id=786 op=LOAD type=BPF msg=audit(1770107705.832:11225): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107705.834:11226): prog-id=787 op=LOAD type=BPF msg=audit(1770107705.834:11227): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107705.834:11228): prog-id=788 op=LOAD type=BPF msg=audit(1770107705.834:11229): prog-id=789 op=LOAD type=BPF msg=audit(1770107705.834:11230): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107705.834:11231): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107705.837:11232): prog-id=790 op=LOAD type=BPF msg=audit(1770107705.837:11233): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107705.837:11234): prog-id=791 op=LOAD type=BPF msg=audit(1770107705.837:11235): prog-id=792 op=LOAD type=BPF msg=audit(1770107705.837:11236): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107705.837:11237): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107705.841:11238): prog-id=793 op=LOAD type=BPF msg=audit(1770107705.841:11239): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107706.024:11240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=snmpd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107706.345:11241): prog-id=794 op=LOAD type=BPF msg=audit(1770107706.345:11242): prog-id=795 op=LOAD type=BPF msg=audit(1770107706.345:11243): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107706.345:11244): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107706.346:11245): prog-id=796 op=LOAD type=BPF msg=audit(1770107706.346:11246): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107706.348:11247): prog-id=797 op=LOAD type=BPF msg=audit(1770107706.348:11248): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107706.348:11249): prog-id=798 op=LOAD type=BPF msg=audit(1770107706.348:11250): prog-id=799 op=LOAD type=BPF msg=audit(1770107706.348:11251): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107706.348:11252): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107706.351:11253): prog-id=800 op=LOAD type=BPF msg=audit(1770107706.351:11254): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107706.351:11255): prog-id=801 op=LOAD type=BPF msg=audit(1770107706.351:11256): prog-id=802 op=LOAD type=BPF msg=audit(1770107706.351:11257): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107706.351:11258): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107706.354:11259): prog-id=803 op=LOAD type=BPF msg=audit(1770107706.355:11260): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107706.603:11261): prog-id=804 op=LOAD type=BPF msg=audit(1770107706.603:11262): prog-id=805 op=LOAD type=BPF msg=audit(1770107706.603:11263): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107706.603:11264): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107706.604:11265): prog-id=806 op=LOAD type=BPF msg=audit(1770107706.604:11266): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107706.606:11267): prog-id=807 op=LOAD type=BPF msg=audit(1770107706.606:11268): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107706.606:11269): prog-id=808 op=LOAD type=BPF msg=audit(1770107706.606:11270): prog-id=809 op=LOAD type=BPF msg=audit(1770107706.606:11271): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107706.606:11272): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107706.609:11273): prog-id=810 op=LOAD type=BPF msg=audit(1770107706.609:11274): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107706.609:11275): prog-id=811 op=LOAD type=BPF msg=audit(1770107706.609:11276): prog-id=812 op=LOAD type=BPF msg=audit(1770107706.609:11277): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107706.609:11278): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107706.612:11279): prog-id=813 op=LOAD type=BPF msg=audit(1770107706.612:11280): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107711.147:11281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107711.361:11282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107713.555:11283): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107713.555:11284): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107713.632:11285): pid=76863 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107713.632:11286): pid=76863 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79676E667174787367656B6A7A6A6675626668726D72796D77796E7A68797368203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107713.634:11287): pid=76863 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107713.640:11288): pid=76863 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107713.817:11289): pid=76863 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107713.817:11290): pid=76863 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107713.821:11291): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107713.821:11292): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107714.267:11293): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107714.267:11294): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107714.335:11295): pid=76887 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107714.336:11296): pid=76887 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6A6778686966636A69777761676C6862777A6768696D727864727865736571203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107714.337:11297): pid=76887 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107714.340:11298): pid=76887 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107714.539:11299): pid=76887 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107714.539:11300): pid=76887 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107714.544:11301): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107714.544:11302): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107714.628:11303): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107714.628:11304): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107714.683:11305): pid=76903 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107714.683:11306): pid=76903 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78726F707174696262666C65636C73646970787475786D6A636F7A696A727962203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107714.684:11307): pid=76903 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107714.687:11308): pid=76903 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107714.853:11309): pid=76903 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107714.853:11310): pid=76903 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107714.858:11311): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107714.858:11312): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107715.027:11313): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107715.027:11314): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107715.059:11315): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107715.059:11316): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107715.076:11317): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107715.076:11318): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107715.114:11319): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107715.114:11320): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107715.135:11321): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107715.135:11322): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107715.201:11323): pid=76961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107715.202:11324): pid=76961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716A73646A6768756973756F70686B6A6874706C6470706877626569627A7967203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107715.202:11325): pid=76961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107715.205:11326): pid=76961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107715.394:11327): pid=76961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107715.394:11328): pid=76961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107715.398:11329): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107715.399:11330): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107715.419:11331): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107715.419:11332): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107715.478:11333): pid=76979 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107715.478:11334): pid=76979 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697974627679636B696761726574706E757564726A69747275646C7072667774203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107715.479:11335): pid=76979 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107715.482:11336): pid=76979 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107715.677:11337): pid=76979 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107715.677:11338): pid=76979 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107715.681:11339): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107715.681:11340): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107715.702:11341): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107715.702:11342): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107715.736:11343): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107715.736:11344): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107715.818:11345): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107715.818:11346): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107715.879:11347): pid=77009 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107715.880:11348): pid=77009 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727361616C7677716670666A6C7763627A6D6E6D6375666E6275637366777A65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107715.881:11349): pid=77009 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107715.884:11350): pid=77009 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107716.064:11351): pid=77009 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107716.064:11352): pid=77009 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107716.069:11353): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107716.069:11354): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107716.187:11355): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107716.187:11356): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107716.252:11357): pid=77033 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107716.253:11358): pid=77033 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E756B697179716F70767666787361717770707A786B6C6877637265727A7874203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107716.253:11359): pid=77033 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107716.256:11360): pid=77033 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107716.768:11361): pid=77033 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107716.768:11362): pid=77033 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107716.772:11363): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107716.772:11364): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107716.982:11365): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107716.982:11366): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107717.040:11367): pid=77181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107717.041:11368): pid=77181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7863686F7277786665776578677A706D78686575716D6A6E76686E746C786869203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107717.041:11369): pid=77181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107717.044:11370): pid=77181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107717.266:11371): pid=77181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107717.266:11372): pid=77181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107717.270:11373): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107717.270:11374): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107717.665:11375): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107717.665:11376): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107717.724:11377): pid=77200 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107717.724:11378): pid=77200 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656E7670646F6D7369726574666A6170717573677769707864736A7974716E79203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107717.724:11379): pid=77200 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107717.727:11380): pid=77200 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107717.905:11381): pid=77200 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107717.905:11382): pid=77200 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107717.909:11383): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107717.909:11384): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107718.017:11385): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107718.017:11386): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107718.072:11387): pid=77224 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107718.073:11388): pid=77224 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676F6E786B7768796E78676670706E69727470736471756A676C6E6A736A6E63203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107718.074:11389): pid=77224 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107718.076:11390): pid=77224 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107718.257:11391): pid=77224 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107718.258:11392): pid=77224 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107718.261:11393): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107718.261:11394): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107718.533:11395): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107718.533:11396): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107718.593:11397): pid=77240 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107718.594:11398): pid=77240 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74646F766C6C637872766365646A6C6C636E7A786D66617173756A6761797470203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107718.594:11399): pid=77240 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107718.597:11400): pid=77240 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107718.782:11401): pid=77240 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107718.782:11402): pid=77240 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107718.786:11403): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107718.786:11404): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107718.971:11405): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107718.971:11406): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107719.004:11407): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107719.004:11408): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107719.022:11409): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107719.022:11410): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107719.057:11411): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107719.058:11412): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107719.084:11413): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107719.084:11414): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107719.146:11415): pid=77298 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107719.147:11416): pid=77298 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636764636D636C68676F6A6E766E7874747A7776737567676675636864706B68203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107719.148:11417): pid=77298 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107719.150:11418): pid=77298 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107719.315:11419): pid=77298 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107719.315:11420): pid=77298 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107719.319:11421): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107719.319:11422): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107719.344:11423): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107719.344:11424): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107719.398:11425): pid=77316 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107719.398:11426): pid=77316 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68656462766C67666C67726E74706D7A6D6364617274637A6B7667666F717373203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107719.399:11427): pid=77316 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107719.401:11428): pid=77316 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107719.559:11429): pid=77316 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107719.560:11430): pid=77316 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107719.563:11431): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107719.564:11432): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107719.587:11433): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107719.587:11434): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107719.619:11435): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107719.620:11436): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107719.684:11437): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107719.684:11438): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107719.718:11439): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107719.718:11440): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107719.739:11441): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107719.739:11442): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107719.773:11443): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107719.774:11444): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107719.798:11445): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107719.798:11446): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107719.862:11447): pid=77380 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107719.862:11448): pid=77380 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62646A73796C6C65796973707463656966616279626B776B78776C6D77636D78203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107719.862:11449): pid=77380 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107719.864:11450): pid=77380 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107720.046:11451): pid=77380 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107720.046:11452): pid=77380 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107720.049:11453): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107720.049:11454): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107720.073:11455): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107720.073:11456): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107720.115:11457): pid=77406 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107720.115:11458): pid=77406 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6C726E7971756F6C746C747A6A7079677068716C616D78646472686E7A6E76203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107720.116:11459): pid=77406 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107720.118:11460): pid=77406 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107720.266:11461): pid=77406 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107720.266:11462): pid=77406 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107720.269:11463): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107720.270:11464): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107720.291:11465): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107720.291:11466): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107720.324:11467): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107720.324:11468): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107720.432:11469): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107720.432:11470): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107720.468:11471): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107720.468:11472): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107720.486:11473): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107720.486:11474): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107720.528:11475): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107720.528:11476): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107720.551:11477): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107720.551:11478): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107720.613:11479): pid=77517 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107720.614:11480): pid=77517 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7465786C76786B6A77727361796872796B787471627067707A616D6878716268203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107720.614:11481): pid=77517 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107720.617:11482): pid=77517 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107720.792:11483): pid=77517 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107720.792:11484): pid=77517 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107720.796:11485): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107720.796:11486): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107720.817:11487): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107720.818:11488): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107720.875:11489): pid=77535 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107720.876:11490): pid=77535 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77666E76756B747079636968716F6F737864746563786D7068647761766C7571203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107720.876:11491): pid=77535 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107720.879:11492): pid=77535 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107721.055:11493): pid=77535 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107721.055:11494): pid=77535 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107721.059:11495): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107721.059:11496): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107721.078:11497): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107721.078:11498): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107721.106:11499): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107721.107:11500): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107721.216:11501): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107721.216:11502): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107721.251:11503): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107721.251:11504): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107721.273:11505): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107721.273:11506): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107721.311:11507): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107721.312:11508): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107721.333:11509): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107721.333:11510): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107721.394:11511): pid=77666 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107721.395:11512): pid=77666 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617A61716F75727066636F776B6D696167717374666B64636666796F7A75746A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107721.395:11513): pid=77666 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107721.397:11514): pid=77666 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107721.625:11515): pid=77666 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107721.625:11516): pid=77666 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107721.628:11517): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107721.628:11518): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107721.651:11519): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107721.651:11520): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107721.711:11521): pid=77684 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107721.711:11522): pid=77684 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73766F6C6B6F7A6765757A7165746C706C6C616A617771626F67766861637969203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107721.713:11523): pid=77684 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107721.716:11524): pid=77684 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107721.908:11525): pid=77684 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107721.908:11526): pid=77684 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107721.911:11527): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107721.911:11528): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107721.930:11529): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107721.930:11530): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107721.960:11531): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107721.960:11532): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107722.040:11533): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107722.040:11534): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107722.075:11535): pid=77854 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107722.075:11536): pid=77854 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D78706B706D6372626E69787678736767796B6A77686E666167647777646C66203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107722.076:11537): pid=77854 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107722.077:11538): pid=77854 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107722.589:11539): prog-id=814 op=LOAD type=BPF msg=audit(1770107722.589:11540): prog-id=815 op=LOAD type=BPF msg=audit(1770107722.589:11541): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107722.589:11542): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107722.591:11543): prog-id=816 op=LOAD type=BPF msg=audit(1770107722.591:11544): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107722.593:11545): prog-id=817 op=LOAD type=BPF msg=audit(1770107722.593:11546): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107722.593:11547): prog-id=818 op=LOAD type=BPF msg=audit(1770107722.593:11548): prog-id=819 op=LOAD type=BPF msg=audit(1770107722.593:11549): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107722.593:11550): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107722.596:11551): prog-id=820 op=LOAD type=BPF msg=audit(1770107722.596:11552): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107722.596:11553): prog-id=821 op=LOAD type=BPF msg=audit(1770107722.596:11554): prog-id=822 op=LOAD type=BPF msg=audit(1770107722.596:11555): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107722.596:11556): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107722.600:11557): prog-id=823 op=LOAD type=BPF msg=audit(1770107722.600:11558): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107722.659:11559): pid=77854 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107722.659:11560): pid=77854 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107722.664:11561): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107722.664:11562): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107722.744:11563): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107722.744:11564): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107722.771:11565): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107722.771:11566): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107722.786:11567): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107722.786:11568): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107722.825:11569): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107722.825:11570): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107722.846:11571): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107722.846:11572): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107722.894:11573): pid=77997 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107722.896:11574): pid=77997 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726E706D6272676D677A6E76646669756774786C6D6C6676726B626D79647161203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107722.896:11575): pid=77997 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107722.902:11576): pid=77997 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107723.066:11577): pid=77997 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107723.066:11578): pid=77997 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107723.071:11579): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107723.071:11580): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107723.092:11581): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107723.092:11582): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107723.160:11583): pid=78023 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107723.162:11584): pid=78023 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696364766C7871766F6E717768736A7579737678687A736B6D6E7871686D736D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107723.162:11585): pid=78023 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107723.166:11586): pid=78023 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107723.329:11587): pid=78023 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107723.329:11588): pid=78023 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107723.332:11589): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107723.332:11590): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107723.353:11591): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107723.353:11592): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107723.385:11593): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107723.385:11594): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107723.478:11595): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107723.478:11596): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107723.509:11597): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107723.509:11598): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107723.529:11599): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107723.529:11600): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107723.566:11601): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107723.566:11602): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107723.591:11603): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107723.591:11604): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107723.648:11605): pid=78167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107723.649:11606): pid=78167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767261776F79767262736A7667617761736162737A686965656B7A7264767177203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107723.649:11607): pid=78167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107723.652:11608): pid=78167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107723.833:11609): pid=78167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107723.833:11610): pid=78167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107723.837:11611): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107723.837:11612): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107723.862:11613): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107723.862:11614): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107723.907:11615): pid=78185 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107723.907:11616): pid=78185 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627266746D786477686A706D6E70716A66676762756873626167616674657567203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107723.907:11617): pid=78185 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107723.910:11618): pid=78185 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107724.082:11619): pid=78185 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107724.083:11620): pid=78185 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107724.086:11621): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107724.086:11622): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107724.107:11623): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107724.107:11624): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107724.136:11625): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107724.136:11626): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107724.245:11627): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107724.245:11628): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107724.304:11629): pid=78223 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107724.304:11630): pid=78223 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757077617971706B6167766274786F64626A676265717576617366666C6E6773203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107724.304:11631): pid=78223 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107724.306:11632): pid=78223 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107724.851:11633): prog-id=824 op=LOAD type=BPF msg=audit(1770107724.852:11634): prog-id=825 op=LOAD type=BPF msg=audit(1770107724.852:11635): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107724.852:11636): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107724.853:11637): prog-id=826 op=LOAD type=BPF msg=audit(1770107724.853:11638): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107724.855:11639): prog-id=827 op=LOAD type=BPF msg=audit(1770107724.855:11640): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107724.855:11641): prog-id=828 op=LOAD type=BPF msg=audit(1770107724.855:11642): prog-id=829 op=LOAD type=BPF msg=audit(1770107724.855:11643): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107724.855:11644): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107724.858:11645): prog-id=830 op=LOAD type=BPF msg=audit(1770107724.858:11646): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107724.858:11647): prog-id=831 op=LOAD type=BPF msg=audit(1770107724.858:11648): prog-id=832 op=LOAD type=BPF msg=audit(1770107724.859:11649): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107724.859:11650): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107724.862:11651): prog-id=833 op=LOAD type=BPF msg=audit(1770107724.862:11652): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107724.931:11653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107724.931:11654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107724.961:11655): pid=78223 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107724.961:11656): pid=78223 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107724.967:11657): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107724.967:11658): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107725.202:11659): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107725.202:11660): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107725.272:11661): pid=78287 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107725.273:11662): pid=78287 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6769776C6F6D626473777962626B62756D7A6C696A68706B636A746C6A746A72203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107725.274:11663): pid=78287 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107725.279:11664): pid=78287 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107725.474:11665): pid=78287 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107725.474:11666): pid=78287 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107725.479:11667): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107725.479:11668): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107725.727:11669): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107725.727:11670): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107725.792:11671): pid=78303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107725.792:11672): pid=78303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69656277666E716D6A7079696D6E636D62636E6E6A646C65636E6C6364716C74203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107725.793:11673): pid=78303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107725.796:11674): pid=78303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107726.354:11675): pid=78303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107726.354:11676): pid=78303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107726.358:11677): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107726.358:11678): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107727.189:11679): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107727.190:11680): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107727.255:11681): pid=78408 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107727.255:11682): pid=78408 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6B6B626E687875756D71656775747669736D6469787561687A7171776B646F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107727.256:11683): pid=78408 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107727.261:11684): pid=78408 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107727.276:11685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107727.418:11686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107727.903:11687): prog-id=834 op=LOAD type=SYSCALL msg=audit(1770107727.903:11687): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff1a0ee550 a2=90 a3=9500000001 items=0 ppid=78675 pid=78676 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107727.903:11687): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F356339616664613433393238613762353332393833623635623665653335 type=BPF msg=audit(1770107727.903:11688): prog-id=835 op=LOAD type=SYSCALL msg=audit(1770107727.903:11688): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe35662050 a2=90 a3=9500000000 items=0 ppid=78672 pid=78674 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107727.903:11688): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303833646234613838326537663039633263643739623164336366363534 type=BPF msg=audit(1770107727.904:11689): prog-id=836 op=LOAD type=SYSCALL msg=audit(1770107727.904:11689): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffca9668d80 a2=90 a3=9500000001 items=0 ppid=78671 pid=78673 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107727.904:11689): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393662396365616261396361363931336365646632313236666232383730 type=SERVICE_START msg=audit(1770107727.955:11690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107727.987:11691): prog-id=837 op=LOAD type=SYSCALL msg=audit(1770107727.987:11691): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc71cc52c0 a2=90 a3=9500000000 items=0 ppid=78694 pid=78695 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107727.987:11691): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F396635393039383434653932386630653063373731323663616365363466 type=BPF msg=audit(1770107728.021:11692): prog-id=838 op=LOAD type=SYSCALL msg=audit(1770107728.021:11692): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc9f7d1bf0 a2=90 a3=9500000001 items=0 ppid=78706 pid=78707 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107728.021:11692): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F353737643337656265643662383062643764316331303638656539313030 type=USER_ACCT msg=audit(1770107728.051:11693): pid=78721 uid=42405 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="ceilometer" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107728.051:11694): pid=78721 uid=42405 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107728.052:11695): pid=78721 uid=42405 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin" type=USER_START msg=audit(1770107728.053:11696): pid=78721 uid=42405 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107728.064:11697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107728.090:11698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107728.114:11699): pid=78721 uid=42405 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107728.114:11700): pid=78721 uid=42405 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin" type=USER_ACCT msg=audit(1770107728.156:11701): pid=78773 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107728.157:11702): pid=78773 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107728.158:11703): pid=78773 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_START msg=audit(1770107728.159:11704): pid=78773 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107728.176:11705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107728.211:11706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1770107728.216:11707): pid=78773 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107728.217:11708): pid=78773 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107728.235:11709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107728.371:11710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=BPF msg=audit(1770107728.460:11711): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1770107728.474:11712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107728.768:11713): prog-id=839 op=LOAD type=SYSCALL msg=audit(1770107728.768:11713): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd68afecf0 a2=90 a3=9500000001 items=0 ppid=79039 pid=79040 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107728.768:11713): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333963386566623936663062636337356462353833646265653535373337 type=SERVICE_START msg=audit(1770107728.813:11714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770107728.825:11715): pid=79056 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107728.825:11716): pid=79056 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107728.826:11717): pid=79056 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_START msg=audit(1770107728.827:11718): pid=79056 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=BPF msg=audit(1770107728.851:11719): prog-id=840 op=LOAD type=SYSCALL msg=audit(1770107728.851:11719): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc04c18710 a2=90 a3=9500000000 items=0 ppid=79070 pid=79071 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107728.851:11719): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F336666356363303333333561373633383065626137323032356234383361 type=USER_END msg=audit(1770107728.899:11720): pid=79056 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107728.900:11721): pid=79056 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107728.941:11722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107728.964:11723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770107729.083:11724): pid=79154 uid=42405 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="ceilometer" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107729.084:11725): pid=79154 uid=42405 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd=6365696C6F6D657465722D726F6F7477726170202F6574632F6365696C6F6D657465722F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D707269767365705F636F6E74657874206365696C6F6D657465722E707269767365702E7379735F61646D696E5F7063747874202D2D707269767365705F736F636B5F70617468202F746D702F746D706761617861696B6B2F707269767365702E736F636B exe="/usr/bin/sudo" terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107729.085:11726): pid=79154 uid=42405 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin" type=USER_START msg=audit(1770107729.086:11727): pid=79154 uid=42405 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107729.179:11728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107729.260:11729): prog-id=841 op=LOAD type=SYSCALL msg=audit(1770107729.260:11729): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fffadd2aff0 a2=90 a3=9500000001 items=0 ppid=79179 pid=79180 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107729.260:11729): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393436363037653530623337373832323937656336313266306236326334 type=SERVICE_STOP msg=audit(1770107729.337:11730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107729.398:11731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1770107729.639:11732): pid=79154 uid=42405 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107729.639:11733): pid=79154 uid=42405 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin" type=BPF msg=audit(1770107732.267:11734): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107732.862:11735): prog-id=842 op=LOAD type=SYSCALL msg=audit(1770107732.862:11735): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd59545120 a2=90 a3=9500000001 items=0 ppid=79646 pid=79647 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107732.862:11735): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653037623962643866646562333463303833633662613435353530326662 type=BPF msg=audit(1770107732.865:11736): prog-id=843 op=LOAD type=SYSCALL msg=audit(1770107732.865:11736): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe86ba3fa0 a2=90 a3=9500000001 items=0 ppid=79648 pid=79649 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107732.865:11736): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653262333061356331626132353730623433366631393966313832373534 type=USER_ACCT msg=audit(1770107732.914:11737): pid=79655 uid=42435 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="neutron" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107732.915:11738): pid=79655 uid=42435 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107732.915:11739): pid=79655 uid=42435 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin" type=USER_START msg=audit(1770107732.916:11740): pid=79655 uid=42435 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107732.925:11741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770107732.967:11742): pid=79666 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107732.968:11743): pid=79666 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107732.968:11744): pid=79666 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107732.970:11745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107732.990:11746): pid=79655 uid=42435 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107732.990:11747): pid=79655 uid=42435 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107733.009:11748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770107733.040:11749): pid=79697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1770107733.040:11750): pid=79697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1770107733.041:11751): pid=79697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770107733.041:11752): pid=79697 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=16 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770107733.041:11752): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd711b5940 a2=1 a3=0 items=0 ppid=1 pid=79697 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107733.041:11752): proctitle="(systemd)" type=USER_START msg=audit(1770107733.043:11753): pid=79697 uid=0 auid=0 ses=16 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1770107733.062:11754): prog-id=844 op=LOAD type=SYSCALL msg=audit(1770107733.062:11754): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd6545e640 a2=90 a3=0 items=0 ppid=1 pid=79697 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107733.062:11754): proctitle="(systemd)" type=BPF msg=audit(1770107733.063:11755): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107733.063:11756): prog-id=845 op=LOAD type=SYSCALL msg=audit(1770107733.063:11756): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd6545e6e0 a2=90 a3=4 items=0 ppid=1 pid=79697 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107733.063:11756): proctitle="(systemd)" type=BPF msg=audit(1770107733.063:11757): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1770107733.113:11758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107733.156:11759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107733.184:11760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770107733.212:11761): pid=79666 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770107733.257:11762): pid=79666 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107733.258:11763): pid=79666 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=ANOM_PROMISCUOUS msg=audit(1770107733.336:11764): dev=br-int prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs" type=SYSCALL msg=audit(1770107733.336:11764): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7ffd9e6e0a80 a2=0 a3=0 items=0 ppid=1 pid=22424 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs" type=PROCTITLE msg=audit(1770107733.336:11764): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D type=BPF msg=audit(1770107733.610:11765): prog-id=846 op=LOAD type=SYSCALL msg=audit(1770107733.610:11765): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdffa93580 a2=90 a3=9500000000 items=0 ppid=79961 pid=79962 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107733.610:11765): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363264386661333738313330353965663166643132333965383430616663 type=SERVICE_START msg=audit(1770107733.687:11766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107733.921:11767): pid=78408 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107733.921:11768): pid=78408 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107733.925:11769): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107733.925:11770): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107734.073:11771): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107734.073:11772): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107734.113:11773): pid=80067 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107734.113:11774): pid=80067 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697675666A676B716270676A686C6D77616678717566636E65637572776C726B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107734.114:11775): pid=80067 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107734.117:11776): pid=80067 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107734.249:11777): pid=80067 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107734.249:11778): pid=80067 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107734.252:11779): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107734.252:11780): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107734.275:11781): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107734.275:11782): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107734.325:11783): pid=80120 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107734.325:11784): pid=80120 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676E62666D676E7A6E70736F7961746C7978776D746273646C737070686B6470203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107734.325:11785): pid=80120 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107734.327:11786): pid=80120 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=ANOM_PROMISCUOUS msg=audit(1770107734.370:11787): dev=genev_sys_6081 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs" type=SYSCALL msg=audit(1770107734.370:11787): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7ffd9e6e0a80 a2=0 a3=17c1 items=0 ppid=1 pid=22424 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs" type=PROCTITLE msg=audit(1770107734.370:11787): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D type=USER_END msg=audit(1770107734.503:11788): pid=80120 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107734.503:11789): pid=80120 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107734.507:11790): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107734.507:11791): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107734.530:11792): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107734.530:11793): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107734.561:11794): pid=80143 uid=42435 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="neutron" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107734.562:11795): pid=80143 uid=42435 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107734.563:11796): pid=80143 uid=42435 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin" type=USER_START msg=audit(1770107734.565:11797): pid=80143 uid=42435 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin" type=USER_ACCT msg=audit(1770107734.577:11798): pid=80149 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107734.577:11799): pid=80149 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6169626E7879686C69716E7570697A736B726B6567746965766B7765626B616D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107734.579:11800): pid=80149 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107734.582:11801): pid=80149 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107734.719:11802): pid=80149 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107734.719:11803): pid=80149 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107734.722:11804): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107734.722:11805): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107734.745:11806): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107734.745:11807): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107734.778:11808): pid=80171 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107734.778:11809): pid=80171 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7869696E75686D70776D636A63676F75717063636E6666686D707367616469203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107734.779:11810): pid=80171 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107734.780:11811): pid=80171 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107734.964:11812): pid=80171 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107734.964:11813): pid=80171 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107734.968:11814): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107734.968:11815): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107734.988:11816): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107734.988:11817): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107735.040:11818): pid=80239 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107735.040:11819): pid=80239 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66706C6A69796366676A627A617478776B65796C666D79777877646578646972203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107735.041:11820): pid=80239 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107735.043:11821): pid=80239 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107735.176:11822): pid=80143 uid=42435 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107735.176:11823): pid=80143 uid=42435 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin" type=USER_END msg=audit(1770107735.210:11824): pid=80239 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107735.210:11825): pid=80239 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107735.213:11826): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107735.213:11827): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107735.237:11828): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107735.237:11829): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107735.283:11830): pid=80257 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107735.283:11831): pid=80257 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616C75756D6775616E667566726C78726B63737375666D696267696C7A627165203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107735.283:11832): pid=80257 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107735.285:11833): pid=80257 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107735.458:11834): pid=80257 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107735.458:11835): pid=80257 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107735.462:11836): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107735.462:11837): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107735.483:11838): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107735.483:11839): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107735.542:11840): pid=80289 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107735.542:11841): pid=80289 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D747371656D716E787770646C6B6E6873716F76706A737A726D6F6967786166203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107735.543:11842): pid=80289 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107735.563:11843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770107735.564:11844): pid=80289 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107735.593:11845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107735.780:11846): pid=80289 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107735.781:11847): pid=80289 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107735.785:11848): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107735.785:11849): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107735.805:11850): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107735.805:11851): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107735.867:11852): pid=80340 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107735.867:11853): pid=80340 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6661756B656F71687372706A6C7A667670627A7A727763626A616371796F7077203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107735.868:11854): pid=80340 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107735.873:11855): pid=80340 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107735.880:11856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107736.077:11857): pid=80340 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107736.077:11858): pid=80340 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107736.081:11859): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107736.081:11860): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107736.101:11861): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107736.101:11862): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107736.148:11863): pid=80357 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107736.148:11864): pid=80357 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7164666461727A71676A6A7369656E6E6D737A61646671746F70697266717567203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107736.149:11865): pid=80357 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107736.151:11866): pid=80357 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107736.326:11867): pid=80357 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107736.326:11868): pid=80357 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107736.329:11869): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107736.329:11870): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107736.354:11871): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107736.354:11872): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107736.410:11873): pid=80373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107736.411:11874): pid=80373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64737268656D7771776F6663726B77626F716D6A6F7A6F6F796469716B6E6575203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107736.411:11875): pid=80373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107736.413:11876): pid=80373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107736.566:11877): pid=80373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107736.566:11878): pid=80373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107736.570:11879): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107736.570:11880): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107736.591:11881): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107736.591:11882): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107736.642:11883): pid=80397 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107736.642:11884): pid=80397 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74776963646866766768737972756C796D61796C636F696362696A6970717666203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107736.643:11885): pid=80397 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107736.646:11886): pid=80397 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107736.781:11887): pid=80397 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107736.781:11888): pid=80397 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107736.784:11889): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107736.784:11890): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107736.808:11891): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107736.808:11892): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107736.866:11893): pid=80413 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107736.866:11894): pid=80413 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6872637662707874786274747170676F76756976736665786D626E676865706B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107736.867:11895): pid=80413 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107736.869:11896): pid=80413 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107737.016:11897): pid=80413 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107737.017:11898): pid=80413 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107737.021:11899): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107737.021:11900): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107737.044:11901): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107737.044:11902): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107737.104:11903): pid=80441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107737.104:11904): pid=80441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69697061747563656F6D706E6963787A6B6F73766261616277646B736F6F7979203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107737.105:11905): pid=80441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107737.107:11906): pid=80441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107737.236:11907): pid=80441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107737.237:11908): pid=80441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107737.239:11909): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107737.239:11910): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107737.258:11911): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107737.258:11912): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107737.303:11913): pid=80509 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107737.303:11914): pid=80509 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726F6579686C6D726D7662636B626C707766726173647673716662796F6D6E64203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107737.304:11915): pid=80509 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107737.306:11916): pid=80509 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107737.455:11917): pid=80509 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107737.455:11918): pid=80509 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107737.459:11919): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107737.459:11920): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107737.483:11921): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107737.483:11922): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107737.540:11923): pid=80606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107737.541:11924): pid=80606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78726167726F68716B62636279776461676A616D6363686A68766871776B6368203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107737.541:11925): pid=80606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107737.545:11926): pid=80606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107737.703:11927): pid=80606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107737.703:11928): pid=80606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107737.707:11929): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107737.707:11930): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107737.735:11931): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107737.735:11932): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107737.789:11933): pid=80637 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107737.789:11934): pid=80637 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79786F6964796670767168726F616A64707568786F6C697672706563716C7A65203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107737.790:11935): pid=80637 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107737.792:11936): pid=80637 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107737.963:11937): pid=80637 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107737.963:11938): pid=80637 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107737.967:11939): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107737.967:11940): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107737.997:11941): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107737.997:11942): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107738.051:11943): pid=80653 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107738.051:11944): pid=80653 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666778706A79656A6D6B6D6A64776D7A7761796C6C66636B66627A627A6F6B74203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107738.052:11945): pid=80653 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107738.053:11946): pid=80653 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107738.226:11947): pid=80653 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107738.227:11948): pid=80653 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107738.230:11949): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107738.230:11950): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107738.253:11951): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107738.253:11952): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107738.291:11953): pid=80669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107738.292:11954): pid=80669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66796377776876706A68776D747072716C6C6477786D696663616178646C6A79203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107738.292:11955): pid=80669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107738.295:11956): pid=80669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107738.439:11957): pid=80669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107738.439:11958): pid=80669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107738.442:11959): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107738.442:11960): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107738.463:11961): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107738.463:11962): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107738.489:11963): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107738.489:11964): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107738.509:11965): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107738.509:11966): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107738.553:11967): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107738.553:11968): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107738.747:11969): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107738.747:11970): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107738.784:11971): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107738.784:11972): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107738.808:11973): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107738.808:11974): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107738.868:11975): pid=80738 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107738.869:11976): pid=80738 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A746967637270786870686C7A7A756770627368686C766E707067686A6A676B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107738.870:11977): pid=80738 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107738.872:11978): pid=80738 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107739.062:11979): pid=80738 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107739.062:11980): pid=80738 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107739.066:11981): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107739.066:11982): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107739.246:11983): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107739.246:11984): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107739.285:11985): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107739.285:11986): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107739.311:11987): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107739.311:11988): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107739.367:11989): pid=80767 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107739.367:11990): pid=80767 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E64657363706D6E6B6A7765646B79717A6B6D766B6A7666656F727568796468203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107739.369:11991): pid=80767 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107739.371:11992): pid=80767 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107739.554:11993): pid=80767 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107739.554:11994): pid=80767 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107739.558:11995): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107739.558:11996): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107739.758:11997): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107739.758:11998): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107739.793:11999): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107739.793:12000): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107739.812:12001): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107739.812:12002): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107739.855:12003): pid=80806 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107739.855:12004): pid=80806 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667364786D62766E667875786F7063776B636D7671706F70657A7A6363657262203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107739.857:12005): pid=80806 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107739.860:12006): pid=80806 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107740.021:12007): pid=80806 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107740.021:12008): pid=80806 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107740.024:12009): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107740.025:12010): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107740.179:12011): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107740.179:12012): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107740.215:12013): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107740.216:12014): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107740.231:12015): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107740.232:12016): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107740.293:12017): pid=80835 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107740.294:12018): pid=80835 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6674627377686679747872687870717266746A7A6C626B6C6C656A6B796E76203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107740.295:12019): pid=80835 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107740.298:12020): pid=80835 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107740.477:12021): pid=80835 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107740.477:12022): pid=80835 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107740.481:12023): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107740.481:12024): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107740.662:12025): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107740.662:12026): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107740.693:12027): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107740.693:12028): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107740.720:12029): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107740.721:12030): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107740.784:12031): pid=80872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107740.784:12032): pid=80872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E62716A6E787164787A7674677062756267777163777361716D7A7A71756272203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107740.785:12033): pid=80872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107740.787:12034): pid=80872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107740.966:12035): pid=80872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107740.967:12036): pid=80872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107740.970:12037): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107740.970:12038): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107741.169:12039): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107741.169:12040): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107741.199:12041): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107741.199:12042): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107741.222:12043): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107741.222:12044): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107741.281:12045): pid=80901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107741.281:12046): pid=80901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B78686168756F677079736A73787479686D6B6375656A7A756279636662666B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107741.282:12047): pid=80901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107741.285:12048): pid=80901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107741.467:12049): pid=80901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107741.467:12050): pid=80901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107741.471:12051): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107741.471:12052): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107741.666:12053): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107741.667:12054): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107741.704:12055): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107741.704:12056): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107741.726:12057): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107741.726:12058): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107741.785:12059): pid=80938 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107741.785:12060): pid=80938 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716273796D717577656C6371796F756E7377786176777170696371737378736E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107741.786:12061): pid=80938 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107741.789:12062): pid=80938 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107741.812:12063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107741.972:12064): pid=80938 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107741.973:12065): pid=80938 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107741.976:12066): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107741.976:12067): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107741.998:12068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107742.165:12069): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107742.165:12070): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107742.199:12071): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107742.199:12072): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107742.223:12073): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107742.224:12074): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107742.271:12075): pid=81087 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107742.272:12076): pid=81087 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6376766865756E6267707165627862646868626570646E78637062726972746F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107742.273:12077): pid=81087 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107742.276:12078): pid=81087 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107742.434:12079): pid=81087 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107742.434:12080): pid=81087 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107742.438:12081): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107742.438:12082): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107742.629:12083): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107742.630:12084): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107742.669:12085): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107742.669:12086): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107742.693:12087): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107742.693:12088): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107742.754:12089): pid=81129 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107742.754:12090): pid=81129 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61707968696E65646D79716E79647768706D6279676A717A7979777A6473617A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107742.755:12091): pid=81129 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107742.758:12092): pid=81129 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107742.941:12093): pid=81129 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107742.941:12094): pid=81129 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107742.945:12095): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107742.945:12096): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107742.964:12097): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107742.964:12098): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107743.028:12099): pid=81181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107743.028:12100): pid=81181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646F6E6762687373627774646C75767767726D75796D66756A676567706C7674203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107743.029:12101): pid=81181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107743.031:12102): pid=81181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107743.634:12103): prog-id=847 op=LOAD type=BPF msg=audit(1770107743.634:12104): prog-id=848 op=LOAD type=BPF msg=audit(1770107743.634:12105): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107743.634:12106): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107743.635:12107): prog-id=849 op=LOAD type=BPF msg=audit(1770107743.635:12108): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107743.638:12109): prog-id=850 op=LOAD type=BPF msg=audit(1770107743.638:12110): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107743.638:12111): prog-id=851 op=LOAD type=BPF msg=audit(1770107743.638:12112): prog-id=852 op=LOAD type=BPF msg=audit(1770107743.638:12113): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107743.638:12114): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107743.642:12115): prog-id=853 op=LOAD type=BPF msg=audit(1770107743.642:12116): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107743.642:12117): prog-id=854 op=LOAD type=BPF msg=audit(1770107743.642:12118): prog-id=855 op=LOAD type=BPF msg=audit(1770107743.642:12119): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107743.642:12120): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107743.647:12121): prog-id=856 op=LOAD type=BPF msg=audit(1770107743.647:12122): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1770107743.671:12123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107743.685:12124): pid=81181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107743.685:12125): pid=81181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107743.690:12126): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107743.690:12127): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107743.694:12128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107744.030:12129): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107744.030:12130): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107744.091:12131): pid=81324 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107744.091:12132): pid=81324 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69636977676A68636665757471786E796A6A6475777A6E62626C69796577716B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107744.093:12133): pid=81324 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107744.098:12134): pid=81324 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107744.699:12135): prog-id=857 op=LOAD type=BPF msg=audit(1770107744.699:12136): prog-id=858 op=LOAD type=BPF msg=audit(1770107744.699:12137): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107744.699:12138): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107744.700:12139): prog-id=859 op=LOAD type=BPF msg=audit(1770107744.700:12140): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107744.703:12141): prog-id=860 op=LOAD type=BPF msg=audit(1770107744.703:12142): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107744.703:12143): prog-id=861 op=LOAD type=BPF msg=audit(1770107744.703:12144): prog-id=862 op=LOAD type=BPF msg=audit(1770107744.703:12145): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107744.703:12146): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107744.707:12147): prog-id=863 op=LOAD type=BPF msg=audit(1770107744.707:12148): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107744.707:12149): prog-id=864 op=LOAD type=BPF msg=audit(1770107744.707:12150): prog-id=865 op=LOAD type=BPF msg=audit(1770107744.707:12151): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107744.707:12152): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107744.711:12153): prog-id=866 op=LOAD type=BPF msg=audit(1770107744.712:12154): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107745.211:12155): prog-id=867 op=LOAD type=BPF msg=audit(1770107745.211:12156): prog-id=868 op=LOAD type=BPF msg=audit(1770107745.211:12157): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107745.211:12158): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107745.212:12159): prog-id=869 op=LOAD type=BPF msg=audit(1770107745.212:12160): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107745.214:12161): prog-id=870 op=LOAD type=BPF msg=audit(1770107745.214:12162): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107745.214:12163): prog-id=871 op=LOAD type=BPF msg=audit(1770107745.214:12164): prog-id=872 op=LOAD type=BPF msg=audit(1770107745.214:12165): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107745.214:12166): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107745.219:12167): prog-id=873 op=LOAD type=BPF msg=audit(1770107745.219:12168): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107745.219:12169): prog-id=874 op=LOAD type=BPF msg=audit(1770107745.219:12170): prog-id=875 op=LOAD type=BPF msg=audit(1770107745.219:12171): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107745.219:12172): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107745.223:12173): prog-id=876 op=LOAD type=BPF msg=audit(1770107745.223:12174): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107745.237:12175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ceilometer_agent_compute comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107745.255:12176): pid=81324 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107745.256:12177): pid=81324 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107745.260:12178): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107745.260:12179): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107745.656:12180): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107745.656:12181): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107745.723:12182): pid=81456 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107745.724:12183): pid=81456 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C72656A68637A656F6C686769626D6A726F7A617676726165667A7A6C67746B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107745.725:12184): pid=81456 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107745.730:12185): pid=81456 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107746.307:12186): prog-id=877 op=LOAD type=BPF msg=audit(1770107746.307:12187): prog-id=878 op=LOAD type=BPF msg=audit(1770107746.307:12188): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107746.307:12189): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107746.308:12190): prog-id=879 op=LOAD type=BPF msg=audit(1770107746.308:12191): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107746.310:12192): prog-id=880 op=LOAD type=BPF msg=audit(1770107746.310:12193): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107746.311:12194): prog-id=881 op=LOAD type=BPF msg=audit(1770107746.311:12195): prog-id=882 op=LOAD type=BPF msg=audit(1770107746.311:12196): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107746.311:12197): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107746.314:12198): prog-id=883 op=LOAD type=BPF msg=audit(1770107746.315:12199): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107746.315:12200): prog-id=884 op=LOAD type=BPF msg=audit(1770107746.315:12201): prog-id=885 op=LOAD type=BPF msg=audit(1770107746.315:12202): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107746.315:12203): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107746.319:12204): prog-id=886 op=LOAD type=BPF msg=audit(1770107746.319:12205): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107746.467:12206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ceilometer_agent_ipmi comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107746.497:12207): pid=81456 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107746.498:12208): pid=81456 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107746.503:12209): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107746.503:12210): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107746.822:12211): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107746.822:12212): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107746.879:12213): pid=81588 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107746.879:12214): pid=81588 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657779706467646F73697269706C637577627A647567696674696C7462626D6D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107746.880:12215): pid=81588 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107746.885:12216): pid=81588 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107747.483:12217): prog-id=887 op=LOAD type=BPF msg=audit(1770107747.483:12218): prog-id=888 op=LOAD type=BPF msg=audit(1770107747.483:12219): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107747.483:12220): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107747.484:12221): prog-id=889 op=LOAD type=BPF msg=audit(1770107747.484:12222): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107747.486:12223): prog-id=890 op=LOAD type=BPF msg=audit(1770107747.486:12224): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107747.486:12225): prog-id=891 op=LOAD type=BPF msg=audit(1770107747.486:12226): prog-id=892 op=LOAD type=BPF msg=audit(1770107747.486:12227): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107747.486:12228): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107747.490:12229): prog-id=893 op=LOAD type=BPF msg=audit(1770107747.490:12230): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107747.490:12231): prog-id=894 op=LOAD type=BPF msg=audit(1770107747.490:12232): prog-id=895 op=LOAD type=BPF msg=audit(1770107747.490:12233): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107747.490:12234): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107747.495:12235): prog-id=896 op=LOAD type=BPF msg=audit(1770107747.495:12236): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107747.591:12237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_logrotate_crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107747.622:12238): pid=81588 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107747.622:12239): pid=81588 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107747.627:12240): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107747.627:12241): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107747.979:12242): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107747.979:12243): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107748.040:12244): pid=81831 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107748.041:12245): pid=81831 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A766A72697763626168777263636E6C6569776772636E716F76716165736F68203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107748.042:12246): pid=81831 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107748.046:12247): pid=81831 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107748.622:12248): prog-id=897 op=LOAD type=BPF msg=audit(1770107748.623:12249): prog-id=898 op=LOAD type=BPF msg=audit(1770107748.623:12250): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107748.623:12251): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107748.624:12252): prog-id=899 op=LOAD type=BPF msg=audit(1770107748.624:12253): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107748.626:12254): prog-id=900 op=LOAD type=BPF msg=audit(1770107748.626:12255): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107748.626:12256): prog-id=901 op=LOAD type=BPF msg=audit(1770107748.626:12257): prog-id=902 op=LOAD type=BPF msg=audit(1770107748.627:12258): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107748.627:12259): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107748.631:12260): prog-id=903 op=LOAD type=BPF msg=audit(1770107748.631:12261): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107748.631:12262): prog-id=904 op=LOAD type=BPF msg=audit(1770107748.631:12263): prog-id=905 op=LOAD type=BPF msg=audit(1770107748.631:12264): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107748.631:12265): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107748.636:12266): prog-id=906 op=LOAD type=BPF msg=audit(1770107748.636:12267): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107748.757:12268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_conductor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107748.778:12269): pid=81831 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107748.779:12270): pid=81831 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107748.783:12271): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107748.783:12272): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107749.168:12273): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107749.168:12274): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107749.237:12275): pid=81916 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107749.238:12276): pid=81916 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636B61666166626D65736B64716D73787874696565777A6265697066736E6C71203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107749.239:12277): pid=81916 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107749.245:12278): pid=81916 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107750.835:12279): prog-id=907 op=LOAD type=BPF msg=audit(1770107750.835:12280): prog-id=908 op=LOAD type=BPF msg=audit(1770107750.835:12281): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107750.835:12282): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107750.836:12283): prog-id=909 op=LOAD type=BPF msg=audit(1770107750.836:12284): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107750.839:12285): prog-id=910 op=LOAD type=BPF msg=audit(1770107750.839:12286): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107750.839:12287): prog-id=911 op=LOAD type=BPF msg=audit(1770107750.839:12288): prog-id=912 op=LOAD type=BPF msg=audit(1770107750.839:12289): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107750.839:12290): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107750.843:12291): prog-id=913 op=LOAD type=BPF msg=audit(1770107750.843:12292): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107750.843:12293): prog-id=914 op=LOAD type=BPF msg=audit(1770107750.843:12294): prog-id=915 op=LOAD type=BPF msg=audit(1770107750.843:12295): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107750.843:12296): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107750.847:12297): prog-id=916 op=LOAD type=BPF msg=audit(1770107750.847:12298): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107750.936:12299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107750.962:12300): pid=81916 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107750.962:12301): pid=81916 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107750.966:12302): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107750.966:12303): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107751.252:12304): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107751.252:12305): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107751.320:12306): pid=82003 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107751.320:12307): pid=82003 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C776972776A6B786A716E6A6B776C776165787A656B7A646A6A7172687A617A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107751.322:12308): pid=82003 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107751.326:12309): pid=82003 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107751.950:12310): prog-id=917 op=LOAD type=BPF msg=audit(1770107751.950:12311): prog-id=918 op=LOAD type=BPF msg=audit(1770107751.950:12312): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107751.950:12313): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107751.952:12314): prog-id=919 op=LOAD type=BPF msg=audit(1770107751.952:12315): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107751.954:12316): prog-id=920 op=LOAD type=BPF msg=audit(1770107751.954:12317): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107751.954:12318): prog-id=921 op=LOAD type=BPF msg=audit(1770107751.954:12319): prog-id=922 op=LOAD type=BPF msg=audit(1770107751.954:12320): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107751.954:12321): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107751.958:12322): prog-id=923 op=LOAD type=BPF msg=audit(1770107751.958:12323): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107751.958:12324): prog-id=924 op=LOAD type=BPF msg=audit(1770107751.958:12325): prog-id=925 op=LOAD type=BPF msg=audit(1770107751.958:12326): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107751.958:12327): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107751.963:12328): prog-id=926 op=LOAD type=BPF msg=audit(1770107751.963:12329): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107752.057:12330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_migration_target comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107752.078:12331): pid=82003 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107752.078:12332): pid=82003 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107752.083:12333): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107752.083:12334): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107752.412:12335): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107752.412:12336): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107752.476:12337): pid=82160 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107752.476:12338): pid=82160 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77636C636861667A706E7A76766376616D64617676627176686D75706E717773203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107752.477:12339): pid=82160 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107752.482:12340): pid=82160 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107753.100:12341): prog-id=927 op=LOAD type=BPF msg=audit(1770107753.100:12342): prog-id=928 op=LOAD type=BPF msg=audit(1770107753.100:12343): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107753.100:12344): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107753.102:12345): prog-id=929 op=LOAD type=BPF msg=audit(1770107753.102:12346): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107753.105:12347): prog-id=930 op=LOAD type=BPF msg=audit(1770107753.105:12348): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107753.105:12349): prog-id=931 op=LOAD type=BPF msg=audit(1770107753.105:12350): prog-id=932 op=LOAD type=BPF msg=audit(1770107753.105:12351): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107753.105:12352): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107753.111:12353): prog-id=933 op=LOAD type=BPF msg=audit(1770107753.111:12354): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107753.111:12355): prog-id=934 op=LOAD type=BPF msg=audit(1770107753.111:12356): prog-id=935 op=LOAD type=BPF msg=audit(1770107753.111:12357): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107753.111:12358): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107753.118:12359): prog-id=936 op=LOAD type=BPF msg=audit(1770107753.118:12360): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107753.233:12361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_vnc_proxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107753.256:12362): pid=82160 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107753.256:12363): pid=82160 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107753.260:12364): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107753.260:12365): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107753.592:12366): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107753.592:12367): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107753.651:12368): pid=82358 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107753.651:12369): pid=82358 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7667746976666F69747972667263687A6C7475636167726F766F6A6E716A6B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107753.652:12370): pid=82358 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107753.657:12371): pid=82358 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107754.287:12372): prog-id=937 op=LOAD type=BPF msg=audit(1770107754.287:12373): prog-id=938 op=LOAD type=BPF msg=audit(1770107754.287:12374): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107754.287:12375): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107754.289:12376): prog-id=939 op=LOAD type=BPF msg=audit(1770107754.289:12377): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107754.291:12378): prog-id=940 op=LOAD type=BPF msg=audit(1770107754.291:12379): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107754.291:12380): prog-id=941 op=LOAD type=BPF msg=audit(1770107754.291:12381): prog-id=942 op=LOAD type=BPF msg=audit(1770107754.291:12382): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107754.291:12383): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107754.295:12384): prog-id=943 op=LOAD type=BPF msg=audit(1770107754.295:12385): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107754.295:12386): prog-id=944 op=LOAD type=BPF msg=audit(1770107754.295:12387): prog-id=945 op=LOAD type=BPF msg=audit(1770107754.295:12388): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107754.295:12389): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107754.300:12390): prog-id=946 op=LOAD type=BPF msg=audit(1770107754.300:12391): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107754.847:12392): prog-id=947 op=LOAD type=BPF msg=audit(1770107754.847:12393): prog-id=948 op=LOAD type=BPF msg=audit(1770107754.847:12394): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107754.847:12395): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107754.848:12396): prog-id=949 op=LOAD type=BPF msg=audit(1770107754.848:12397): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107754.851:12398): prog-id=950 op=LOAD type=BPF msg=audit(1770107754.851:12399): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107754.851:12400): prog-id=951 op=LOAD type=BPF msg=audit(1770107754.851:12401): prog-id=952 op=LOAD type=BPF msg=audit(1770107754.851:12402): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107754.851:12403): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107754.855:12404): prog-id=953 op=LOAD type=BPF msg=audit(1770107754.855:12405): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107754.855:12406): prog-id=954 op=LOAD type=BPF msg=audit(1770107754.855:12407): prog-id=955 op=LOAD type=BPF msg=audit(1770107754.855:12408): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107754.855:12409): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107754.859:12410): prog-id=956 op=LOAD type=BPF msg=audit(1770107754.859:12411): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107754.873:12412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_controller comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107754.905:12413): pid=82358 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107754.906:12414): pid=82358 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107754.910:12415): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107754.910:12416): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107755.197:12417): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107755.197:12418): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107755.263:12419): pid=82498 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107755.263:12420): pid=82498 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F696D70736D796E716A6F72727A656C7564686B6E706A7566646D67726D7464203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107755.264:12421): pid=82498 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107755.269:12422): pid=82498 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107755.879:12423): prog-id=957 op=LOAD type=BPF msg=audit(1770107755.879:12424): prog-id=958 op=LOAD type=BPF msg=audit(1770107755.879:12425): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107755.880:12426): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107755.881:12427): prog-id=959 op=LOAD type=BPF msg=audit(1770107755.881:12428): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107755.883:12429): prog-id=960 op=LOAD type=BPF msg=audit(1770107755.883:12430): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107755.883:12431): prog-id=961 op=LOAD type=BPF msg=audit(1770107755.883:12432): prog-id=962 op=LOAD type=BPF msg=audit(1770107755.883:12433): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107755.883:12434): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107755.887:12435): prog-id=963 op=LOAD type=BPF msg=audit(1770107755.887:12436): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107755.887:12437): prog-id=964 op=LOAD type=BPF msg=audit(1770107755.887:12438): prog-id=965 op=LOAD type=BPF msg=audit(1770107755.887:12439): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107755.887:12440): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107755.892:12441): prog-id=966 op=LOAD type=BPF msg=audit(1770107755.892:12442): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107755.992:12443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_metadata_agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107756.010:12444): pid=82498 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107756.010:12445): pid=82498 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107756.014:12446): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107756.014:12447): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107756.052:12448): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107756.052:12449): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107756.075:12450): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107756.075:12451): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107756.200:12452): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107756.200:12453): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107756.241:12454): pid=82588 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107756.241:12455): pid=82588 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627A7362717A7074626A7262727678796D767375677867777A676F716F757063203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107756.242:12456): pid=82588 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107756.246:12457): pid=82588 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107756.433:12458): pid=82588 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107756.433:12459): pid=82588 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107756.450:12460): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107756.451:12461): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107756.696:12462): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107756.696:12463): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107756.726:12464): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107756.726:12465): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107756.752:12466): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107756.752:12467): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107756.788:12468): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107756.788:12469): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107756.818:12470): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107756.818:12471): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107756.879:12472): pid=82636 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107756.879:12473): pid=82636 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697561617576727866646C686A7073617768786C6D62687569776D627A777266203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107756.880:12474): pid=82636 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107756.883:12475): pid=82636 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107757.048:12476): pid=82636 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107757.048:12477): pid=82636 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107757.053:12478): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107757.053:12479): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107757.082:12480): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107757.083:12481): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107757.121:12482): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107757.122:12483): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107757.145:12484): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107757.145:12485): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107757.173:12486): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107757.173:12487): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107757.196:12488): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107757.197:12489): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107757.254:12490): pid=82688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107757.254:12491): pid=82688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67796768636169676F786A72756979746D6664616C766A6967626575636B706E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107757.255:12492): pid=82688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107757.258:12493): pid=82688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107757.726:12494): pid=82688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107757.726:12495): pid=82688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107757.731:12496): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107757.731:12497): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107758.005:12498): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107758.005:12499): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107758.032:12500): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107758.032:12501): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1770107758.142:12502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107758.155:12503): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107758.155:12504): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107758.200:12505): pid=82787 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107758.200:12506): pid=82787 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71676B6A6F6C616F6165756C6C776F706C746E6A716C6B6A787073676F736C62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107758.200:12507): pid=82787 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107758.203:12508): pid=82787 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107758.240:12509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107758.243:12510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107758.351:12511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107758.381:12512): pid=82787 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107758.382:12513): pid=82787 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107758.386:12514): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107758.386:12515): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107758.394:12516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107758.413:12517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107758.484:12518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107758.501:12519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107758.543:12520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107758.648:12521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107758.698:12522): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107758.698:12523): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107758.762:12524): pid=82913 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107758.763:12525): pid=82913 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7464656B66647662686972757970756A686275666E74677563706F746C6F7275203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107758.764:12526): pid=82913 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107758.768:12527): pid=82913 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107758.956:12528): pid=82913 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107758.956:12529): pid=82913 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107758.960:12530): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107758.961:12531): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107759.071:12532): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107759.071:12533): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107759.130:12534): pid=82929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107759.130:12535): pid=82929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7764706F667968707A716B6D72746D676E62776F727174756F6F75667378626D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107759.131:12536): pid=82929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107759.134:12537): pid=82929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107759.247:12538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107759.317:12539): pid=82929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107759.317:12540): pid=82929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107759.320:12541): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107759.321:12542): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1770107759.362:12543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107759.366:12544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107759.425:12545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107759.774:12546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107759.819:12547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107760.045:12548): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107760.045:12549): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107760.077:12550): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107760.077:12551): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107760.099:12552): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107760.099:12553): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107760.123:12554): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107760.123:12555): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107760.138:12556): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107760.138:12557): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107760.181:12558): pid=83136 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107760.181:12559): pid=83136 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7262616262676B74736D73627179787A7A7A626D75766F6C62696375626F6B73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107760.182:12560): pid=83136 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107760.185:12561): pid=83136 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107760.346:12562): pid=83136 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107760.346:12563): pid=83136 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107760.349:12564): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107760.349:12565): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107760.382:12566): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107760.383:12567): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107760.421:12568): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107760.421:12569): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107760.442:12570): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107760.443:12571): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107760.466:12572): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107760.466:12573): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107760.489:12574): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107760.489:12575): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107760.536:12576): pid=83217 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107760.537:12577): pid=83217 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6F626B756B6F6571786279767063737763676E6372736B7A786A7379647561203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107760.537:12578): pid=83217 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107760.539:12579): pid=83217 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107760.716:12580): pid=83217 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107760.716:12581): pid=83217 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107760.719:12582): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107760.719:12583): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107760.741:12584): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107760.741:12585): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107760.763:12586): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107760.764:12587): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107760.993:12588): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107760.993:12589): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107761.054:12590): pid=83303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107761.054:12591): pid=83303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A79746B7A7869617A7177636F7267646574786C7A71726E6468736168796668203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107761.055:12592): pid=83303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107761.058:12593): pid=83303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107761.232:12594): pid=83303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107761.232:12595): pid=83303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107761.237:12596): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107761.237:12597): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107761.505:12598): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107761.505:12599): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107761.533:12600): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107761.533:12601): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107761.559:12602): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107761.559:12603): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107761.594:12604): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107761.594:12605): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107761.627:12606): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107761.628:12607): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107761.679:12608): pid=83372 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107761.680:12609): pid=83372 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7768696E736E6F65686D69766176667579686A7169676E6E666C6A6F6A686C63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107761.681:12610): pid=83372 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107761.684:12611): pid=83372 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107761.871:12612): pid=83372 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107761.871:12613): pid=83372 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107761.876:12614): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107761.876:12615): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107761.905:12616): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107761.905:12617): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107761.974:12618): pid=83391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107761.974:12619): pid=83391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7373686A7067616F786A6E656568756876616673616766687263626569797176203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107761.975:12620): pid=83391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107761.977:12621): pid=83391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107762.134:12622): pid=83391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107762.134:12623): pid=83391 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107762.137:12624): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107762.137:12625): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107762.165:12626): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107762.165:12627): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107762.196:12628): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107762.196:12629): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107762.305:12630): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107762.305:12631): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107762.335:12632): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107762.335:12633): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1770107762.340:12634): pid=83511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=83511 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107762.354:12635): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107762.354:12636): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107762.393:12637): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107762.393:12638): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107762.418:12639): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107762.419:12640): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107762.458:12641): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107762.458:12642): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107762.491:12643): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107762.491:12644): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107762.527:12645): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107762.527:12646): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107762.547:12647): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107762.548:12648): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107762.578:12649): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107762.578:12650): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107762.598:12651): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107762.598:12652): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107762.661:12653): pid=83586 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107762.662:12654): pid=83586 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107762.662:12655): pid=83586 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107762.666:12656): pid=83586 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRYPTO_SESSION msg=audit(1770107762.696:12657): pid=83388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=83511 suid=74 rport=48570 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107762.696:12658): pid=83388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=83511 suid=74 rport=48570 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_END msg=audit(1770107762.845:12659): pid=83586 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107762.847:12660): pid=83586 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107762.852:12661): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107762.852:12662): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107762.927:12663): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107762.927:12664): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107762.968:12665): pid=83648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107762.968:12666): pid=83648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A63666579646879726362697763676C7A7565676D79757A78726D6970757868203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107762.969:12667): pid=83648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107762.972:12668): pid=83648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107763.109:12669): pid=83648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107763.110:12670): pid=83648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107763.113:12671): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107763.113:12672): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1770107763.148:12673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107763.250:12674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107763.276:12675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107763.436:12676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107764.659:12677): pid=83388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=83511 suid=74 rport=48570 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107764.659:12678): pid=83388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=83511 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107764.660:12679): pid=83388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107764.661:12680): pid=83388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=83388 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107764.661:12681): pid=83388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107765.997:12682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107765.999:12683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107766.230:12684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107766.335:12685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107770.019:12686): pid=84124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=84124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107770.301:12687): pid=84123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=84124 suid=74 rport=38522 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107770.301:12688): pid=84123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=84124 suid=74 rport=38522 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770107772.146:12689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107772.257:12690): pid=84123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=84124 suid=74 rport=38522 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107772.257:12691): pid=84123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=84124 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107772.258:12692): pid=84123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107772.258:12693): pid=84123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=84123 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107772.258:12694): pid=84123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107772.341:12695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107773.168:12696): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107773.168:12697): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107773.210:12698): pid=84453 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107773.210:12699): pid=84453 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63796C6278637478746D686C777A6C796A6B766A65626A666E70697763797168203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107773.211:12700): pid=84453 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107773.214:12701): pid=84453 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107773.340:12702): pid=84453 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107773.340:12703): pid=84453 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107773.343:12704): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107773.343:12705): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1770107776.104:12706): pid=84647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=84647 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107776.328:12707): pid=84646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=84647 suid=74 rport=37264 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107776.329:12708): pid=84646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=84647 suid=74 rport=37264 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107777.826:12709): pid=84646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=84647 suid=74 rport=37264 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107777.827:12710): pid=84646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=84647 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107777.827:12711): pid=84646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107777.828:12712): pid=84646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=84646 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107777.828:12713): pid=84646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107783.399:12714): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107783.399:12715): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107783.460:12716): pid=84895 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107783.460:12717): pid=84895 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756F7A7567666A71716465776972666A6975666579706E736879696C7A6A7579203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107783.461:12718): pid=84895 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107783.465:12719): pid=84895 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107783.625:12720): pid=84895 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107783.625:12721): pid=84895 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107783.629:12722): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107783.629:12723): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107783.994:12724): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107783.995:12725): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107784.045:12726): pid=85001 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107784.045:12727): pid=85001 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62736B6475617A6D7664736D63667777797965726178686D6B79686F6D757861203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107784.045:12728): pid=85001 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107784.047:12729): pid=85001 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107784.257:12730): pid=85001 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107784.258:12731): pid=85001 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107784.261:12732): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107784.261:12733): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107784.333:12734): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107784.333:12735): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107784.379:12736): pid=85017 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107784.379:12737): pid=85017 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646F726C66686C7165726F7A717275716A7A6E696A65736F77686B6568766777203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107784.380:12738): pid=85017 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107784.383:12739): pid=85017 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107784.568:12740): pid=85017 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107784.568:12741): pid=85017 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107784.571:12742): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107784.571:12743): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107784.703:12744): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107784.703:12745): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107784.732:12746): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107784.732:12747): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107784.754:12748): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107784.754:12749): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107784.791:12750): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107784.791:12751): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107784.816:12752): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107784.816:12753): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107784.863:12754): pid=85116 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107784.864:12755): pid=85116 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6776756A737376616B7062776B64757279686670797576776E716A79686D66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107784.864:12756): pid=85116 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107784.866:12757): pid=85116 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107785.047:12758): pid=85116 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107785.048:12759): pid=85116 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107785.051:12760): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107785.051:12761): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107785.075:12762): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107785.075:12763): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107785.130:12764): pid=85142 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107785.131:12765): pid=85142 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726E70776569776A787278626E796F63617A757770717A6870666B6D616C6866203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107785.131:12766): pid=85142 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107785.134:12767): pid=85142 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107785.306:12768): pid=85142 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107785.306:12769): pid=85142 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107785.310:12770): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107785.310:12771): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107785.332:12772): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107785.332:12773): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107785.362:12774): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107785.362:12775): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107785.457:12776): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107785.457:12777): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107785.518:12778): pid=85188 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107785.519:12779): pid=85188 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A72676D78686D626472646875656C776D767A67756C6D73767176746A756564203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107785.520:12780): pid=85188 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107785.522:12781): pid=85188 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107785.711:12782): pid=85188 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107785.711:12783): pid=85188 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107785.714:12784): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107785.714:12785): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107785.831:12786): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107785.832:12787): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107785.892:12788): pid=85249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107785.893:12789): pid=85249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D666A77746B7A747970786466756F7371696D77686E636A75726C706B726473203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107785.893:12790): pid=85249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107785.896:12791): pid=85249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107786.365:12792): pid=85249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107786.365:12793): pid=85249 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107786.368:12794): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107786.368:12795): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107786.539:12796): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107786.539:12797): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107786.602:12798): pid=85402 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107786.602:12799): pid=85402 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7964706C7A6A71787463676E6E7578787263736B74686E74757A6B6B7A766377203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107786.604:12800): pid=85402 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107786.606:12801): pid=85402 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107786.895:12802): pid=85402 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107786.896:12803): pid=85402 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107786.900:12804): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107786.900:12805): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107787.322:12806): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107787.323:12807): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107787.386:12808): pid=85440 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107787.386:12809): pid=85440 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E79776675766463706778627A7A6D73747A7568696B71626E706A6C67796D6D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107787.387:12810): pid=85440 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107787.390:12811): pid=85440 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107787.590:12812): pid=85440 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107787.590:12813): pid=85440 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107787.593:12814): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107787.593:12815): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107787.699:12816): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107787.699:12817): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107787.762:12818): pid=85509 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107787.762:12819): pid=85509 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A66757964756C65716B77756261767474646D796965646D726177697167646D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107787.762:12820): pid=85509 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107787.765:12821): pid=85509 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107787.953:12822): pid=85509 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107787.953:12823): pid=85509 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107787.957:12824): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107787.957:12825): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107788.221:12826): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107788.221:12827): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107788.282:12828): pid=85533 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107788.283:12829): pid=85533 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7675646266727165736F74696565697A7365707A6C65776969686A7879727779203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107788.283:12830): pid=85533 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107788.286:12831): pid=85533 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107788.453:12832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107788.456:12833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107788.470:12834): pid=85533 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107788.471:12835): pid=85533 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107788.474:12836): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107788.475:12837): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1770107788.553:12838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107788.555:12839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107788.573:12840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107788.671:12841): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107788.671:12842): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1770107788.674:12843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107788.700:12844): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107788.700:12845): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107788.727:12846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107788.730:12847): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107788.730:12848): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107788.737:12849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107788.767:12850): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107788.767:12851): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107788.796:12852): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107788.796:12853): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107788.862:12854): pid=85695 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107788.862:12855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1770107788.862:12856): pid=85695 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776F79636A6474746F77766562656467766174697470737569726E6F6B786D70203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107788.863:12857): pid=85695 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107788.866:12858): pid=85695 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107788.885:12859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107789.114:12860): pid=85695 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107789.114:12861): pid=85695 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107789.118:12862): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107789.118:12863): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107789.148:12864): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107789.148:12865): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107789.205:12866): pid=85723 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107789.205:12867): pid=85723 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64656E786E75627069646469686F6965667A70727862746762716367636F6C76203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107789.207:12868): pid=85723 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107789.209:12869): pid=85723 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107789.392:12870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107789.402:12871): pid=85723 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107789.403:12872): pid=85723 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107789.407:12873): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107789.407:12874): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107789.434:12875): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107789.434:12876): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107789.467:12877): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107789.467:12878): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107789.531:12879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107789.534:12880): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107789.534:12881): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107789.562:12882): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107789.562:12883): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107789.594:12884): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107789.594:12885): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107789.628:12886): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107789.628:12887): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107789.658:12888): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107789.658:12889): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107789.719:12890): pid=85805 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107789.719:12891): pid=85805 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F74746B7A64716F71746A7979786373626674757063736B756A707373706C77203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107789.720:12892): pid=85805 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107789.724:12893): pid=85805 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107789.894:12894): pid=85805 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107789.895:12895): pid=85805 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107789.899:12896): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107789.899:12897): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107789.928:12898): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107789.928:12899): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107789.966:12900): pid=85824 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107789.966:12901): pid=85824 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A75716B747065736C74756D7466687A6C6D626573716B61757A6C7569716761203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107789.966:12902): pid=85824 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107789.970:12903): pid=85824 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107789.987:12904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107789.990:12905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107790.122:12906): pid=85824 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107790.122:12907): pid=85824 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107790.127:12908): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107790.127:12909): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107790.148:12910): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107790.148:12911): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107790.180:12912): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107790.181:12913): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107790.316:12914): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107790.316:12915): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107790.347:12916): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107790.347:12917): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107790.377:12918): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107790.378:12919): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107790.412:12920): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107790.413:12921): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107790.443:12922): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107790.443:12923): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107790.466:12924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107790.484:12925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770107790.510:12926): pid=85941 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107790.510:12927): pid=85941 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646E6265616D6F727961696672707875716D75656C6B796E6B73627067766B69203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107790.511:12928): pid=85941 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107790.514:12929): pid=85941 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107790.699:12930): pid=85941 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107790.699:12931): pid=85941 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107790.701:12932): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107790.701:12933): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107790.726:12934): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107790.726:12935): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107790.776:12936): pid=85998 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107790.777:12937): pid=85998 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6E777A797A746E70737865757A7A6E617863696672646C646F78796B667362203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107790.777:12938): pid=85998 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107790.779:12939): pid=85998 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107790.951:12940): pid=85998 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107790.952:12941): pid=85998 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107790.956:12942): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107790.956:12943): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107790.978:12944): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107790.979:12945): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107791.006:12946): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107791.006:12947): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107791.106:12948): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107791.106:12949): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107791.136:12950): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107791.136:12951): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107791.155:12952): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107791.155:12953): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107791.186:12954): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107791.186:12955): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107791.210:12956): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107791.210:12957): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107791.255:12958): pid=86068 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107791.256:12959): pid=86068 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C797378756364776B72627670716B6F78707477776D696378726A6C6772797A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107791.257:12960): pid=86068 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107791.259:12961): pid=86068 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107791.401:12962): pid=86068 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107791.401:12963): pid=86068 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107791.405:12964): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107791.405:12965): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107791.430:12966): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107791.430:12967): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107791.481:12968): pid=86086 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107791.481:12969): pid=86086 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A76686C676C657571637564696B73766D64797872646A6B657678796F677779203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107791.481:12970): pid=86086 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107791.483:12971): pid=86086 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107791.666:12972): pid=86086 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107791.666:12973): pid=86086 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107791.669:12974): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107791.669:12975): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107791.690:12976): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107791.690:12977): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107791.748:12978): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107791.748:12979): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107791.850:12980): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107791.851:12981): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107791.902:12982): pid=86116 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107791.903:12983): pid=86116 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7765676B6A787A767471676E6579757072657074776B78797A64686562746A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107791.903:12984): pid=86116 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107791.906:12985): pid=86116 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107792.473:12986): prog-id=967 op=LOAD type=BPF msg=audit(1770107792.473:12987): prog-id=968 op=LOAD type=BPF msg=audit(1770107792.473:12988): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107792.474:12989): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107792.475:12990): prog-id=969 op=LOAD type=BPF msg=audit(1770107792.475:12991): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107792.477:12992): prog-id=970 op=LOAD type=BPF msg=audit(1770107792.477:12993): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107792.477:12994): prog-id=971 op=LOAD type=BPF msg=audit(1770107792.477:12995): prog-id=972 op=LOAD type=BPF msg=audit(1770107792.477:12996): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107792.477:12997): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107792.481:12998): prog-id=973 op=LOAD type=BPF msg=audit(1770107792.481:12999): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107792.481:13000): prog-id=974 op=LOAD type=BPF msg=audit(1770107792.481:13001): prog-id=975 op=LOAD type=BPF msg=audit(1770107792.482:13002): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107792.482:13003): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107792.486:13004): prog-id=976 op=LOAD type=BPF msg=audit(1770107792.486:13005): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107792.558:13006): pid=86116 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107792.558:13007): pid=86116 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107792.563:13008): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107792.563:13009): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107792.679:13010): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107792.679:13011): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107792.709:13012): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107792.710:13013): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107792.732:13014): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107792.732:13015): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107792.770:13016): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107792.770:13017): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107792.794:13018): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107792.794:13019): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107792.855:13020): pid=86291 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107792.856:13021): pid=86291 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67716C616476657973777668786E7A686861676273767A756E616D6A756B796B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107792.856:13022): pid=86291 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107792.861:13023): pid=86291 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107793.040:13024): pid=86291 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107793.041:13025): pid=86291 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107793.044:13026): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107793.044:13027): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107793.068:13028): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107793.068:13029): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107793.116:13030): pid=86350 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107793.116:13031): pid=86350 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79786B6576726F67676E6B70676B676268666F6A63776371777A746766786478203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107793.116:13032): pid=86350 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107793.119:13033): pid=86350 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107793.309:13034): pid=86350 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107793.310:13035): pid=86350 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107793.313:13036): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107793.313:13037): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107793.335:13038): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107793.335:13039): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107793.365:13040): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107793.365:13041): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107793.465:13042): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107793.466:13043): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107793.497:13044): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107793.498:13045): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107793.531:13046): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107793.531:13047): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107793.568:13048): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107793.568:13049): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107793.594:13050): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107793.594:13051): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107793.656:13052): pid=86422 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107793.656:13053): pid=86422 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6E7272706876706579746A6F686161747663757067696263706B7376787266203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107793.657:13054): pid=86422 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107793.663:13055): pid=86422 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107793.680:13056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107793.683:13057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107793.872:13058): pid=86422 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107793.872:13059): pid=86422 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107793.878:13060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107793.879:13061): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107793.879:13062): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107793.894:13063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107793.908:13064): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107793.908:13065): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107793.953:13066): pid=86568 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107793.953:13067): pid=86568 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D70716F77746D77696B64646765787A696F657A7163706B6163767973656476203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107793.955:13068): pid=86568 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107793.959:13069): pid=86568 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107794.137:13070): pid=86568 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107794.137:13071): pid=86568 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107794.141:13072): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107794.141:13073): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107794.161:13074): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107794.161:13075): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107794.195:13076): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107794.195:13077): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107794.317:13078): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107794.317:13079): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107794.377:13080): pid=86606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107794.378:13081): pid=86606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6772676A7868796E7778746377737A6E70797067777962746F69616D7065716B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107794.379:13082): pid=86606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107794.383:13083): pid=86606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107794.980:13084): prog-id=977 op=LOAD type=BPF msg=audit(1770107794.980:13085): prog-id=978 op=LOAD type=BPF msg=audit(1770107794.980:13086): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107794.980:13087): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107794.982:13088): prog-id=979 op=LOAD type=BPF msg=audit(1770107794.982:13089): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107794.984:13090): prog-id=980 op=LOAD type=BPF msg=audit(1770107794.984:13091): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107794.984:13092): prog-id=981 op=LOAD type=BPF msg=audit(1770107794.984:13093): prog-id=982 op=LOAD type=BPF msg=audit(1770107794.984:13094): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107794.984:13095): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107794.988:13096): prog-id=983 op=LOAD type=BPF msg=audit(1770107794.988:13097): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107794.988:13098): prog-id=984 op=LOAD type=BPF msg=audit(1770107794.988:13099): prog-id=985 op=LOAD type=BPF msg=audit(1770107794.988:13100): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107794.988:13101): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107794.993:13102): prog-id=986 op=LOAD type=BPF msg=audit(1770107794.993:13103): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107795.062:13104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107795.062:13105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107795.078:13106): pid=86606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107795.078:13107): pid=86606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107795.081:13108): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107795.081:13109): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107795.311:13110): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107795.311:13111): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107795.369:13112): pid=86671 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107795.370:13113): pid=86671 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68706C6C7973617466726D6D6B6A627465727368666163796E657A75756F746F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107795.370:13114): pid=86671 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107795.374:13115): pid=86671 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107795.565:13116): pid=86671 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107795.566:13117): pid=86671 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107795.570:13118): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107795.570:13119): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107795.776:13120): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107795.776:13121): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107795.834:13122): pid=86687 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107795.834:13123): pid=86687 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78797373626F6B776362636C65637A726A677A6973616E6E676B64637A766C61203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107795.835:13124): pid=86687 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107795.837:13125): pid=86687 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107796.395:13126): pid=86687 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107796.396:13127): pid=86687 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107796.401:13128): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107796.401:13129): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1770107797.140:13130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107797.143:13131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107797.272:13132): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107797.272:13133): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107797.323:13134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770107797.337:13135): pid=86795 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107797.337:13136): pid=86795 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726D6B6D6B67757276637A7678756B667861726E696165777971776E6B6E777A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107797.338:13137): pid=86795 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107797.342:13138): pid=86795 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107797.522:13139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770107797.987:13140): prog-id=987 op=LOAD type=SYSCALL msg=audit(1770107797.987:13140): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff1a0de6e0 a2=90 a3=9500000001 items=0 ppid=87059 pid=87060 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107797.987:13140): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313937653361633663316266373934646530666135373036643230653434 type=SERVICE_START msg=audit(1770107798.056:13141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770107798.057:13142): pid=87076 uid=42436 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="nova" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42436)" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107798.057:13143): pid=87076 uid=42436 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="unknown(42436)" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107798.058:13144): pid=87076 uid=42436 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42436)" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107798.110:13145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770107798.129:13146): pid=87102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1770107798.129:13147): pid=87102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1770107798.129:13148): pid=87102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770107798.130:13149): pid=87102 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=17 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770107798.130:13149): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd711b5940 a2=1 a3=0 items=0 ppid=1 pid=87102 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107798.130:13149): proctitle="(systemd)" type=USER_START msg=audit(1770107798.131:13150): pid=87102 uid=0 auid=0 ses=17 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1770107798.144:13151): prog-id=988 op=LOAD type=SYSCALL msg=audit(1770107798.144:13151): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff258b9580 a2=90 a3=0 items=0 ppid=1 pid=87102 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107798.144:13151): proctitle="(systemd)" type=BPF msg=audit(1770107798.145:13152): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107798.145:13153): prog-id=989 op=LOAD type=SYSCALL msg=audit(1770107798.145:13153): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff258b9620 a2=90 a3=4 items=0 ppid=1 pid=87102 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107798.145:13153): proctitle="(systemd)" type=BPF msg=audit(1770107798.145:13154): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1770107798.243:13155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107798.270:13156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770107798.290:13157): pid=87076 uid=42436 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42436)" AUID="tripleo-admin" type=USER_END msg=audit(1770107798.356:13158): pid=86795 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107798.356:13159): pid=86795 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107798.360:13160): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107798.360:13161): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107798.402:13162): pid=87076 uid=42436 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42436)" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107798.402:13163): pid=87076 uid=42436 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42436)" AUID="tripleo-admin" type=USER_LOGIN msg=audit(1770107798.526:13164): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107798.526:13165): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107798.587:13166): pid=87208 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107798.588:13167): pid=87208 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7379796B7177717879716C6866776B62706F626C737270726B616568786C65203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107798.592:13168): pid=87208 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107798.598:13169): pid=87208 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107798.781:13170): pid=87208 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107798.782:13171): pid=87208 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107798.786:13172): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107798.786:13173): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107798.811:13174): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107798.811:13175): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107798.873:13176): pid=87229 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107798.873:13177): pid=87229 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6A646872666A706E626973686C77736A79617A636F7A74796C6B76696F6170203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107798.875:13178): pid=87229 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107798.877:13179): pid=87229 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107799.049:13180): pid=87229 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107799.049:13181): pid=87229 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107799.053:13182): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107799.053:13183): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107799.076:13184): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107799.076:13185): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107799.100:13186): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107799.100:13187): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107799.122:13188): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107799.122:13189): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107799.153:13190): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107799.153:13191): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107799.310:13192): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107799.310:13193): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107799.349:13194): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107799.349:13195): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107799.368:13196): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107799.368:13197): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107799.411:13198): pid=87349 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107799.411:13199): pid=87349 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6B6F76637266636B6F7266716B62646F6A67686672617268767263616A7467203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107799.412:13200): pid=87349 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107799.415:13201): pid=87349 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107799.571:13202): pid=87349 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107799.571:13203): pid=87349 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107799.574:13204): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107799.574:13205): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107799.600:13206): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107799.600:13207): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107799.643:13208): pid=87372 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107799.643:13209): pid=87372 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6966686872797676786E6D6F646967686D6E79636D6B6E7964686A696C6A6265203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107799.644:13210): pid=87372 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107799.647:13211): pid=87372 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107800.234:13212): prog-id=990 op=LOAD type=BPF msg=audit(1770107800.234:13213): prog-id=991 op=LOAD type=BPF msg=audit(1770107800.234:13214): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107800.234:13215): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107800.237:13216): prog-id=992 op=LOAD type=BPF msg=audit(1770107800.237:13217): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107800.239:13218): prog-id=993 op=LOAD type=BPF msg=audit(1770107800.239:13219): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107800.239:13220): prog-id=994 op=LOAD type=BPF msg=audit(1770107800.239:13221): prog-id=995 op=LOAD type=BPF msg=audit(1770107800.239:13222): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107800.239:13223): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107800.244:13224): prog-id=996 op=LOAD type=BPF msg=audit(1770107800.244:13225): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107800.244:13226): prog-id=997 op=LOAD type=BPF msg=audit(1770107800.244:13227): prog-id=998 op=LOAD type=BPF msg=audit(1770107800.244:13228): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107800.244:13229): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107800.249:13230): prog-id=999 op=LOAD type=BPF msg=audit(1770107800.249:13231): prog-id=0 op=UNLOAD type=USER_END msg=audit(1770107800.285:13232): pid=87372 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107800.285:13233): pid=87372 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107800.292:13234): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107800.292:13235): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107800.800:13236): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107800.800:13237): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107800.851:13238): pid=87441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107800.852:13239): pid=87441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646D68786A626763646579697867656566736678666A76667969686171767866203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107800.853:13240): pid=87441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107800.856:13241): pid=87441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1770107801.469:13242): prog-id=1000 op=LOAD type=BPF msg=audit(1770107801.469:13243): prog-id=1001 op=LOAD type=BPF msg=audit(1770107801.469:13244): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107801.469:13245): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107801.471:13246): prog-id=1002 op=LOAD type=BPF msg=audit(1770107801.471:13247): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107801.473:13248): prog-id=1003 op=LOAD type=BPF msg=audit(1770107801.473:13249): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107801.474:13250): prog-id=1004 op=LOAD type=BPF msg=audit(1770107801.474:13251): prog-id=1005 op=LOAD type=BPF msg=audit(1770107801.474:13252): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107801.474:13253): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107801.478:13254): prog-id=1006 op=LOAD type=BPF msg=audit(1770107801.478:13255): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107801.478:13256): prog-id=1007 op=LOAD type=BPF msg=audit(1770107801.478:13257): prog-id=1008 op=LOAD type=BPF msg=audit(1770107801.478:13258): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107801.478:13259): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107801.483:13260): prog-id=1009 op=LOAD type=BPF msg=audit(1770107801.483:13261): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107802.132:13262): prog-id=1010 op=LOAD type=BPF msg=audit(1770107802.132:13263): prog-id=1011 op=LOAD type=BPF msg=audit(1770107802.132:13264): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107802.132:13265): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107802.134:13266): prog-id=1012 op=LOAD type=BPF msg=audit(1770107802.134:13267): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107802.136:13268): prog-id=1013 op=LOAD type=BPF msg=audit(1770107802.136:13269): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107802.136:13270): prog-id=1014 op=LOAD type=BPF msg=audit(1770107802.136:13271): prog-id=1015 op=LOAD type=BPF msg=audit(1770107802.136:13272): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107802.136:13273): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107802.140:13274): prog-id=1016 op=LOAD type=BPF msg=audit(1770107802.140:13275): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107802.140:13276): prog-id=1017 op=LOAD type=BPF msg=audit(1770107802.140:13277): prog-id=1018 op=LOAD type=BPF msg=audit(1770107802.140:13278): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107802.140:13279): prog-id=0 op=UNLOAD type=BPF msg=audit(1770107802.145:13280): prog-id=1019 op=LOAD type=BPF msg=audit(1770107802.145:13281): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770107802.158:13282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_compute comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107802.175:13283): pid=87441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107802.175:13284): pid=87441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107802.181:13285): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107802.181:13286): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107802.214:13287): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107802.214:13288): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107802.247:13289): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107802.247:13290): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107802.348:13291): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107802.348:13292): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107802.403:13293): pid=87631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107802.403:13294): pid=87631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7967736A6F656274706868797875796A727176756D746878646E63657A666977203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107802.404:13295): pid=87631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107802.410:13296): pid=87631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770107802.428:13297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107802.587:13298): pid=87631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107802.587:13299): pid=87631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107802.590:13300): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107802.590:13301): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107802.612:13302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107802.871:13303): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107802.871:13304): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107802.900:13305): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107802.900:13306): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107802.913:13307): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107802.913:13308): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107802.949:13309): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107802.949:13310): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107802.965:13311): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107802.965:13312): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107803.009:13313): pid=87808 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107803.010:13314): pid=87808 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6961787961756264796F65706A69697775766A73657765626563747577776563203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107803.010:13315): pid=87808 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107803.014:13316): pid=87808 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107803.153:13317): pid=87808 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107803.154:13318): pid=87808 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107803.157:13319): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107803.157:13320): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107803.186:13321): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107803.186:13322): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107803.220:13323): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107803.220:13324): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107803.244:13325): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107803.244:13326): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107803.272:13327): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107803.272:13328): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107803.298:13329): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107803.298:13330): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107803.355:13331): pid=87892 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107803.355:13332): pid=87892 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62636B736C6E7874706A7766686A686A71656661766C6161706D7961716D6170203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107803.356:13333): pid=87892 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107803.359:13334): pid=87892 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107803.561:13335): pid=87892 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107803.561:13336): pid=87892 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107803.565:13337): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107803.565:13338): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107803.592:13339): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107803.592:13340): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107803.615:13341): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107803.615:13342): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107803.723:13343): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107803.723:13344): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107803.784:13345): pid=87971 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107803.784:13346): pid=87971 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63646A68626C746D6578716B627677737A7170767775687768696C636E747A6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107803.785:13347): pid=87971 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107803.788:13348): pid=87971 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107803.955:13349): pid=87971 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107803.956:13350): pid=87971 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107803.959:13351): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107803.959:13352): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107804.304:13353): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107804.304:13354): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107804.366:13355): pid=88028 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107804.367:13356): pid=88028 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656C756370746E746B63747864776A6570706C6779657367776D717570746270203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107804.368:13357): pid=88028 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107804.370:13358): pid=88028 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107804.558:13359): pid=88028 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107804.558:13360): pid=88028 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107804.561:13361): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107804.561:13362): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107804.656:13363): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107804.656:13364): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107804.715:13365): pid=88052 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107804.715:13366): pid=88052 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D64726B6D6471667561666A6873797A7975776F6B66666361786D75726A6D70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107804.716:13367): pid=88052 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107804.719:13368): pid=88052 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107804.902:13369): pid=88052 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107804.902:13370): pid=88052 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107804.906:13371): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107804.906:13372): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRED_DISP msg=audit(1770107808.641:13373): pid=87109 uid=0 auid=0 ses=17 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1770107808.643:13374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107808.675:13375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107808.837:13376): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107808.837:13377): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107808.866:13378): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107808.866:13379): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107808.877:13380): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107808.877:13381): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107808.912:13382): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107808.912:13383): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107809.086:13384): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107809.086:13385): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107809.120:13386): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107809.121:13387): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107809.131:13388): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107809.131:13389): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107809.219:13390): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107809.219:13391): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107809.248:13392): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107809.248:13393): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107809.288:13394): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107809.288:13395): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107809.312:13396): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107809.313:13397): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107809.346:13398): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107809.346:13399): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107809.369:13400): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107809.369:13401): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107809.433:13402): pid=88244 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107809.433:13403): pid=88244 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616C63766B62716972746A7372616F7579787A776470757679707A7179736369203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737303130373830382E383632393435332D3133343837312D3136333338313637353830323133392F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107809.434:13404): pid=88244 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107809.439:13405): pid=88244 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107809.729:13406): pid=88244 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107809.730:13407): pid=88244 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107809.733:13408): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107809.733:13409): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107809.775:13410): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107809.775:13411): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107809.823:13412): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107809.823:13413): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107809.843:13414): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107809.843:13415): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107809.877:13416): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107809.877:13417): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107809.898:13418): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107809.898:13419): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107809.960:13420): pid=88303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107809.960:13421): pid=88303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67756F6A656663676B736F70756D776770656C71696D64616F746C6366667461203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737303130373830382E383632393435332D3133343837312D3136333338313637353830323133392F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107809.961:13422): pid=88303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107809.964:13423): pid=88303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1770107817.388:13424): pid=88748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=88748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107817.852:13425): pid=88747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=88748 suid=74 rport=35302 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107817.852:13426): pid=88747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=88748 suid=74 rport=35302 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SOFTWARE_UPDATE msg=audit(1770107818.319:13427): pid=88305 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="crudini-0.9.3-6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=np0005606265.ooo.test addr=? terminal=pts/0 res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770107819.125:13428): pid=88303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107819.126:13429): pid=88303 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107819.130:13430): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107819.130:13431): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107819.150:13432): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107819.150:13433): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1770107819.152:13434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107819.156:13435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107819.161:13436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107819.166:13437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107819.170:13438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107819.192:13439): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107819.192:13440): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107819.343:13441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107819.399:13442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107819.478:13443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107819.487:13444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107819.502:13445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107820.145:13446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107820.267:13447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107820.889:13448): pid=88747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88748 suid=74 rport=35302 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107820.890:13449): pid=88747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=88748 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107820.890:13450): pid=88747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107820.891:13451): pid=88747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=88747 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107820.891:13452): pid=88747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="operator" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107820.911:13453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107820.914:13454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107821.352:13455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107821.378:13456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107824.148:13457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107824.150:13458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107824.320:13459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107824.329:13460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107824.867:13461): pid=89477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=89477 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107825.139:13462): pid=89476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=89477 suid=74 rport=50126 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107825.139:13463): pid=89476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=89477 suid=74 rport=50126 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770107828.144:13464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107828.146:13465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107828.153:13466): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107828.153:13467): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107828.187:13468): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107828.187:13469): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107828.211:13470): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107828.211:13471): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107828.257:13472): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107828.257:13473): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107828.284:13474): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107828.284:13475): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1770107828.304:13476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107828.320:13477): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107828.321:13478): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107828.342:13479): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107828.342:13480): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107828.356:13481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107828.427:13482): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107828.427:13483): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107828.439:13484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107828.455:13485): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107828.455:13486): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1770107828.474:13487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770107828.489:13488): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107828.489:13489): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107828.507:13490): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107828.507:13491): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107828.539:13492): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107828.539:13493): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107828.559:13494): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107828.560:13495): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107828.626:13496): pid=89760 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107828.626:13497): pid=89760 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D77676C707574786168766F6E747064647769776F68756C6F6A77756C616673203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737303130373832382E3138363439322D3133353130362D38363435383631343739373632342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107828.629:13498): pid=89760 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107828.635:13499): pid=89760 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107828.918:13500): pid=89760 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107828.918:13501): pid=89760 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107828.921:13502): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107828.921:13503): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107828.943:13504): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107828.943:13505): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107828.971:13506): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107828.971:13507): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107829.180:13508): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107829.180:13509): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107829.203:13510): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107829.203:13511): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107829.218:13512): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107829.218:13513): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107829.252:13514): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107829.252:13515): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107829.267:13516): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107829.267:13517): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107829.299:13518): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107829.299:13519): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107829.320:13520): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107829.320:13521): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107829.409:13522): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107829.409:13523): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107829.434:13524): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107829.434:13525): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107829.466:13526): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107829.466:13527): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107829.485:13528): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107829.485:13529): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107829.511:13530): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107829.511:13531): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107829.530:13532): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107829.530:13533): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107829.585:13534): pid=89889 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107829.586:13535): pid=89889 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696C726E6D6A68707063786667686863746470787075766D776C787571676C75203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737303130373832392E323031313031382D3133353133362D39333234353637363139353436362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107829.586:13536): pid=89889 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107829.589:13537): pid=89889 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107829.825:13538): pid=89889 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107829.826:13539): pid=89889 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107829.830:13540): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107829.830:13541): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107829.849:13542): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107829.849:13543): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107829.883:13544): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107829.883:13545): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1770107833.140:13546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107833.303:13547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107837.134:13548): pid=90321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=90321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107837.315:13549): pid=90275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=90321 suid=74 rport=57412 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107837.316:13550): pid=90275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=90321 suid=74 rport=57412 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107839.944:13551): pid=90275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=90321 suid=74 rport=57412 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107839.945:13552): pid=90275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=90321 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107839.945:13553): pid=90275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107839.946:13554): pid=90275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=90275 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107839.946:13555): pid=90275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107850.149:13556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107850.152:13557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107850.156:13558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107850.159:13559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107850.162:13560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107850.290:13561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107850.332:13562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107850.342:13563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107850.365:13564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107850.401:13565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107850.418:13566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107850.511:13567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107852.145:13568): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107852.148:13569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107852.576:13570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107852.631:13571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107855.138:13572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107855.142:13573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107855.285:13574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107855.365:13575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107855.710:13576): pid=89476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89477 suid=74 rport=50126 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107855.711:13577): pid=89476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=89477 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107855.712:13578): pid=89476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107855.712:13579): pid=89476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=89476 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107855.712:13580): pid=89476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107859.143:13581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107859.147:13582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107859.151:13583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107859.410:13584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107859.453:13585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107859.464:13586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107861.947:13587): pid=91832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=91832 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107861.995:13588): pid=91782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=91832 suid=74 rport=45794 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107861.995:13589): pid=91782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=91832 suid=74 rport=45794 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107863.917:13590): pid=91782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91832 suid=74 rport=45794 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107863.917:13591): pid=91782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=91832 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107863.918:13592): pid=91782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107863.918:13593): pid=91782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=91782 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107863.918:13594): pid=91782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="ftp" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107863.936:13595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107864.089:13596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107866.125:13597): pid=92238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=92238 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107875.660:13598): pid=92237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=92238 suid=74 rport=42130 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107875.660:13599): pid=92237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=92238 suid=74 rport=42130 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107877.579:13600): pid=92237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92238 suid=74 rport=42130 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107877.580:13601): pid=92237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=92238 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107877.580:13602): pid=92237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107877.581:13603): pid=92237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=92237 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107877.581:13604): pid=92237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107881.148:13605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107881.150:13606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107881.153:13607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107881.157:13608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107881.160:13609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107881.163:13610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107881.308:13611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107881.371:13612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107881.487:13613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107881.555:13614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107881.573:13615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107881.610:13616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107883.141:13617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107883.144:13618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107883.515:13619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107883.567:13620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107886.142:13621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107886.145:13622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107886.294:13623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107886.344:13624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107887.738:13625): pid=93361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=93361 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107887.805:13626): pid=93335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=93361 suid=74 rport=57710 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107887.805:13627): pid=93335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=93361 suid=74 rport=57710 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107889.073:13628): pid=93335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93361 suid=74 rport=57710 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107889.073:13629): pid=93335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=93361 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107889.074:13630): pid=93335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107889.074:13631): pid=93335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=93335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107889.074:13632): pid=93335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107890.143:13633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107890.145:13634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107890.149:13635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107890.260:13636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107890.452:13637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107890.531:13638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107890.901:13639): pid=93685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=93685 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107891.143:13640): pid=93676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=93685 suid=74 rport=47642 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107891.143:13641): pid=93676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=93685 suid=74 rport=47642 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107892.743:13642): pid=93695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=93695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107892.988:13643): pid=93694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=93695 suid=74 rport=38033 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=120.48.64.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107892.988:13644): pid=93694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=93695 suid=74 rport=38033 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=120.48.64.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107893.761:13645): pid=93676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93685 suid=74 rport=47642 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107893.762:13646): pid=93676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=93685 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107893.763:13647): pid=93676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107893.764:13648): pid=93676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=93676 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107893.764:13649): pid=93676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107894.144:13650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107894.327:13651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107894.548:13652): pid=93694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93695 suid=74 rport=38033 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=120.48.64.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107894.549:13653): pid=93694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=93695 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107894.550:13654): pid=93694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=120.48.64.74 addr=120.48.64.74 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107894.550:13655): pid=93694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=93694 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107894.550:13656): pid=93694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=120.48.64.74 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770107903.113:13657): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107903.113:13658): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107903.152:13659): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107903.153:13660): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107903.166:13661): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107903.166:13662): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107903.192:13663): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107903.193:13664): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107903.348:13665): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107903.348:13666): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107903.379:13667): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107903.379:13668): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107903.405:13669): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107903.405:13670): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107903.491:13671): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107903.491:13672): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107903.520:13673): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107903.520:13674): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107903.556:13675): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107903.556:13676): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107903.577:13677): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107903.577:13678): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107903.606:13679): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107903.606:13680): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107903.628:13681): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107903.628:13682): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107903.682:13683): pid=94444 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107903.682:13684): pid=94444 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776361676568687270666365747463666172637A78716975766565687A657565203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737303130373930332E313439383837382D3133363630372D3136353539373133353837323431362F416E736962616C6C5A5F74656D7066696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107903.686:13685): pid=94444 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107903.691:13686): pid=94444 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107903.859:13687): pid=94444 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107903.859:13688): pid=94444 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107903.863:13689): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107903.863:13690): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107903.881:13691): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107903.881:13692): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107903.910:13693): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107903.910:13694): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107904.000:13695): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107904.000:13696): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107904.031:13697): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107904.032:13698): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107904.045:13699): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107904.045:13700): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107904.082:13701): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107904.082:13702): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107904.228:13703): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107904.228:13704): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107904.269:13705): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107904.269:13706): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107904.288:13707): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107904.288:13708): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107904.319:13709): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107904.320:13710): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107904.339:13711): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107904.339:13712): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107904.394:13713): pid=94616 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107904.394:13714): pid=94616 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6271736A646D6F73786F766D67747667676A6B6F647A6B7079697776786E6B203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737303130373930342E303238393436342D3133363635312D31323935383439353337383132352F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107904.396:13715): pid=94616 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107904.399:13716): pid=94616 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107904.591:13717): pid=94616 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107904.591:13718): pid=94616 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107904.593:13719): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107904.593:13720): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107904.610:13721): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107904.610:13722): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107904.638:13723): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107904.639:13724): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107904.735:13725): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107904.735:13726): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107904.767:13727): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107904.767:13728): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107904.783:13729): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107904.783:13730): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107904.819:13731): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107904.819:13732): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107904.981:13733): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107904.981:13734): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107905.022:13735): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107905.022:13736): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107905.037:13737): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107905.037:13738): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107905.067:13739): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107905.067:13740): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107905.085:13741): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107905.085:13742): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107905.148:13743): pid=94757 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107905.149:13744): pid=94757 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78777278716A7874696C767473677666657A64726465676A6672616568626565203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737303130373930342E373634303738342D3133363638372D3232333032333431363633363639342F416E736962616C6C5A5F626C6F636B696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107905.150:13745): pid=94757 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107905.152:13746): pid=94757 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107905.324:13747): pid=94757 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107905.325:13748): pid=94757 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107905.328:13749): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107905.328:13750): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107905.348:13751): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107905.348:13752): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107905.375:13753): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107905.375:13754): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107905.778:13755): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107905.778:13756): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107905.809:13757): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107905.809:13758): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107905.820:13759): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107905.820:13760): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107905.863:13761): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107905.863:13762): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107905.891:13763): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107905.891:13764): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107905.954:13765): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107905.954:13766): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107905.974:13767): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107905.974:13768): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107906.010:13769): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107906.011:13770): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107906.029:13771): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107906.030:13772): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107906.096:13773): pid=94857 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107906.097:13774): pid=94857 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78637770797375786C737A716163647A6D7572646B746664756F787762756568203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737303130373930352E383036312D3133363732352D3234383034333330313334323436352F416E736962616C6C5A5F626C6F636B696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107906.098:13775): pid=94857 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107906.100:13776): pid=94857 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107906.272:13777): pid=94857 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107906.272:13778): pid=94857 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107906.277:13779): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107906.277:13780): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107906.302:13781): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107906.303:13782): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107906.331:13783): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107906.332:13784): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107906.439:13785): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107906.440:13786): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107906.477:13787): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107906.477:13788): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107906.497:13789): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107906.498:13790): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107906.537:13791): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107906.537:13792): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107906.694:13793): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107906.694:13794): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107906.734:13795): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107906.734:13796): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107906.753:13797): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107906.753:13798): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107906.784:13799): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107906.784:13800): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107906.803:13801): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107906.803:13802): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107906.857:13803): pid=94956 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107906.857:13804): pid=94956 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73696A6A7571616866646D6E696A70667869617A696B70766B746D79757A7968203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737303130373930362E343734383437362D3133363736312D3236323035353337353834373136392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107906.858:13805): pid=94956 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107906.860:13806): pid=94956 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107906.993:13807): pid=94956 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107906.994:13808): pid=94956 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107906.996:13809): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107906.996:13810): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107907.020:13811): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107907.020:13812): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107907.049:13813): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107907.049:13814): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107907.229:13815): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107907.229:13816): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107907.254:13817): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107907.254:13818): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107907.269:13819): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107907.269:13820): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107907.299:13821): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107907.300:13822): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107907.511:13823): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107907.511:13824): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107907.542:13825): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107907.542:13826): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107907.566:13827): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107907.566:13828): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107907.595:13829): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107907.595:13830): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107907.655:13831): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107907.655:13832): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1770107907.709:13833): pid=95056 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1770107907.709:13834): pid=95056 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7563657A6F726A626A6B7462626664666175787168796A65747568706B697179203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737303130373930372E323531343939342D3133363739392D34343936353437383238373631312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770107907.709:13835): pid=95056 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1770107907.711:13836): pid=95056 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107907.916:13837): pid=95056 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1770107907.916:13838): pid=95056 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1770107907.919:13839): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107907.919:13840): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1770107907.940:13841): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1770107907.940:13842): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_END msg=audit(1770107907.970:13843): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1770107907.970:13844): pid=24264 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1770107912.142:13845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107912.145:13846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107912.147:13847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107912.149:13848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107912.151:13849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107912.154:13850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107912.298:13851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107912.344:13852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107912.382:13853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107912.458:13854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107912.479:13855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107912.554:13856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107914.143:13857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107914.147:13858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107914.547:13859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107914.654:13860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107917.144:13861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107917.146:13862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107917.293:13863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107917.341:13864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107921.141:13865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107921.144:13866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107921.147:13867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107921.281:13868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107921.327:13869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107921.430:13870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107925.141:13871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107925.332:13872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107926.381:13873): pid=96451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=96451 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107926.655:13874): pid=96450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=96451 suid=74 rport=49036 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107926.655:13875): pid=96450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=96451 suid=74 rport=49036 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107927.784:13876): pid=96450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=96451 suid=74 rport=49036 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107927.784:13877): pid=96450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=96451 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107927.785:13878): pid=96450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107927.785:13879): pid=96450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=96450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107927.785:13880): pid=96450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107943.141:13881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107943.144:13882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107943.146:13883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107943.148:13884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107943.151:13885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107943.153:13886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107943.343:13887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107943.367:13888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107943.402:13889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107943.430:13890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107943.440:13891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107943.452:13892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107943.845:13893): pid=97419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=97419 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107944.348:13894): pid=97418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=97419 suid=74 rport=41832 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107944.349:13895): pid=97418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=97419 suid=74 rport=41832 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770107945.141:13896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107945.144:13897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107945.626:13898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107945.651:13899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107947.880:13900): pid=97418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=97419 suid=74 rport=41832 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107947.880:13901): pid=97418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=97419 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107947.881:13902): pid=97418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107947.882:13903): pid=97418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=97418 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107947.882:13904): pid=97418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107947.901:13905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107947.905:13906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107948.111:13907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107948.152:13908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107952.147:13909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107952.152:13910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107952.156:13911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107952.369:13912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107952.402:13913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107952.484:13914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107956.143:13915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107956.185:13916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107956.185:13917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107956.303:13918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107970.457:13919): pid=98897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=98897 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770107970.458:13920): pid=98896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=98897 suid=74 rport=46024 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107970.459:13921): pid=98896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=98897 suid=74 rport=46024 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770107970.527:13922): pid=98896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1770107970.543:13923): pid=98896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107970.543:13924): pid=98896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770107970.575:13925): pid=98896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107970.576:13926): pid=98896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=98897 suid=74 rport=46024 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770107970.579:13927): pid=98896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770107970.579:13928): pid=98896 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=18 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1770107970.579:13928): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffef257bbc0 a2=4 a3=3e8 items=0 ppid=40636 pid=98896 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770107970.579:13928): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1770107970.581:13929): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_START msg=audit(1770107970.619:13930): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1770107970.620:13931): pid=98899 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=98899 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=CRED_ACQ msg=audit(1770107970.622:13932): pid=98899 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1770107970.667:13933): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770107970.667:13934): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1770107970.670:13935): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=98900 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1770107970.739:13936): pid=98913 uid=1000 auid=1000 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770107970.740:13937): pid=98913 uid=1000 auid=1000 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646361617762687764756D68707375716D726A6D74676F79686B7963746C6372203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770107970.742:13938): pid=98913 uid=1000 auid=1000 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770107970.748:13939): pid=98913 uid=1000 auid=1000 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770107973.613:13940): pid=98913 uid=1000 auid=1000 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770107973.613:13941): pid=98913 uid=1000 auid=1000 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770107973.618:13942): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770107973.618:13943): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=SERVICE_START msg=audit(1770107974.145:13944): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107974.149:13945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107974.152:13946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107974.155:13947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107974.159:13948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107974.162:13949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107974.332:13950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107974.382:13951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107974.439:13952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107974.465:13953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107974.569:13954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107974.597:13955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107975.629:13956): pid=99326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=99326 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1770107976.148:13957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107976.152:13958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107976.621:13959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107976.692:13960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107978.041:13961): pid=99487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=99487 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1770107978.137:13962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107978.253:13963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770107978.304:13964): pid=99484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=99487 suid=74 rport=58056 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107978.304:13965): pid=99484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=99487 suid=74 rport=58056 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770107978.403:13966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107978.469:13967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107980.619:13968): pid=99484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=99487 suid=74 rport=58056 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107980.621:13969): pid=99484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=99487 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107980.622:13970): pid=99484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107980.622:13971): pid=99484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=99484 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107980.622:13972): pid=99484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107983.143:13973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107983.144:13974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770107983.146:13975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107983.364:13976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107983.414:13977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107983.615:13978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770107986.223:13979): pid=99325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=99326 suid=74 rport=53308 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770107986.224:13980): pid=99325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=99326 suid=74 rport=53308 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770107987.149:13981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770107987.314:13982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107988.854:13983): pid=99325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=99326 suid=74 rport=53308 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770107988.854:13984): pid=99325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=99326 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770107988.854:13985): pid=99325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107988.855:13986): pid=99325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=99325 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770107988.855:13987): pid=99325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770107997.460:13988): pid=100691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=100691 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108001.566:13989): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770108001.566:13990): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1770108001.568:13991): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=100779 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1770108001.635:13992): pid=100792 uid=1000 auid=1000 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770108001.635:13993): pid=100792 uid=1000 auid=1000 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6476696B65626C6A7A6D61736B7A7563647163787472637772636D62667478203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770108001.637:13994): pid=100792 uid=1000 auid=1000 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770108001.642:13995): pid=100792 uid=1000 auid=1000 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRYPTO_SESSION msg=audit(1770108001.757:13996): pid=100690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=100691 suid=74 rport=51364 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108001.758:13997): pid=100690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=100691 suid=74 rport=51364 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108003.515:13998): pid=100690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100691 suid=74 rport=51364 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108003.516:13999): pid=100690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=100691 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108003.516:14000): pid=100690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108003.517:14001): pid=100690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=100690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108003.517:14002): pid=100690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="sshd" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108005.146:14003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108005.148:14004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108005.149:14005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108005.151:14006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108005.152:14007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108005.154:14008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108005.344:14009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108005.413:14010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108005.435:14011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108005.464:14012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108005.526:14013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108005.544:14014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108005.658:14015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r8773cde23af140b18e6d60b7513dc16b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108005.694:14016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r3de261f09dff4f65bb8b29f2a838b0a2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SOFTWARE_UPDATE msg=audit(1770108005.697:14017): pid=100794 uid=0 auid=1000 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="sos-4.8.2-2.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SERVICE_START msg=audit(1770108006.065:14018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108006.065:14019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108006.067:14020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r8773cde23af140b18e6d60b7513dc16b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108006.069:14021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r3de261f09dff4f65bb8b29f2a838b0a2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108006.540:14022): pid=101501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=101501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_END msg=audit(1770108006.581:14023): pid=100792 uid=1000 auid=1000 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770108006.581:14024): pid=100792 uid=1000 auid=1000 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770108006.585:14025): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770108006.585:14026): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=SERVICE_START msg=audit(1770108007.140:14027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108007.142:14028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108007.578:14029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108007.625:14030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770108007.983:14031): pid=101500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=101501 suid=74 rport=33234 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108007.984:14032): pid=101500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=101501 suid=74 rport=33234 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108008.425:14033): pid=101566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=101566 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108008.688:14034): pid=101565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=101566 suid=74 rport=33238 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108008.688:14035): pid=101565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=101566 suid=74 rport=33238 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108009.141:14036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108009.144:14037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108009.311:14038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108009.361:14039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108014.143:14040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108014.146:14041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108014.149:14042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108014.320:14043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108014.353:14044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108014.586:14045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108016.325:14046): pid=101500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=101501 suid=74 rport=33234 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108016.325:14047): pid=101500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=101501 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108016.326:14048): pid=101500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108016.327:14049): pid=101500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=101500 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108016.327:14050): pid=101500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="sync" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108017.604:14051): pid=101565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=101566 suid=74 rport=33238 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108017.604:14052): pid=101565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=101566 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108017.605:14053): pid=101565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108017.605:14054): pid=101565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=101565 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108017.605:14055): pid=101565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108017.620:14056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108017.782:14057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770108026.124:14058): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770108026.124:14059): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1770108026.126:14060): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=102565 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1770108026.192:14061): pid=102578 uid=1000 auid=1000 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770108026.193:14062): pid=102578 uid=1000 auid=1000 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616E706C767A736A6F717A616B63726177676468687A73626E71746778716975203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770108026.194:14063): pid=102578 uid=1000 auid=1000 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770108026.199:14064): pid=102578 uid=1000 auid=1000 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770108033.232:14065): pid=102578 uid=1000 auid=1000 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770108033.232:14066): pid=102578 uid=1000 auid=1000 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770108033.237:14067): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770108033.237:14068): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=SERVICE_START msg=audit(1770108036.147:14069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108036.150:14070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108036.153:14071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108036.156:14072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108036.160:14073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108036.164:14074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108036.433:14075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108036.442:14076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108036.492:14077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108036.599:14078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108036.616:14079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108036.701:14080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108038.146:14081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108038.150:14082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108038.540:14083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108038.705:14084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108040.142:14085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108040.145:14086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108040.281:14087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108040.432:14088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108043.479:14089): pid=103933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=103933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108043.911:14090): pid=103932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=103933 suid=74 rport=35174 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108043.911:14091): pid=103932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=103933 suid=74 rport=35174 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108045.159:14092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108045.163:14093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108045.167:14094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108045.273:14095): pid=103932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=103933 suid=74 rport=35174 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108045.274:14096): pid=103932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=103933 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108045.274:14097): pid=103932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108045.275:14098): pid=103932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=103932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108045.275:14099): pid=103932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108045.447:14100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108045.466:14101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108045.499:14102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108048.145:14103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108048.315:14104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108049.340:14105): pid=104322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=104322 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108049.891:14106): pid=104321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=104322 suid=74 rport=35216 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108049.892:14107): pid=104321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=104322 suid=74 rport=35216 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108051.791:14108): pid=104321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=104322 suid=74 rport=35216 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108051.792:14109): pid=104321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=104322 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108051.792:14110): pid=104321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108051.793:14111): pid=104321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=104321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108051.793:14112): pid=104321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770108053.142:14113): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770108053.142:14114): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1770108053.144:14115): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=104402 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1770108053.350:14116): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770108053.350:14117): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1770108053.939:14118): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770108053.939:14119): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1770108053.940:14120): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=104424 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1770108054.136:14121): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770108054.136:14122): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=SERVICE_START msg=audit(1770108067.147:14123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108067.150:14124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108067.153:14125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108067.157:14126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108067.161:14127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108067.165:14128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108067.216:14129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108067.216:14130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108067.323:14131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108067.437:14132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108067.452:14133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108067.464:14134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108067.538:14135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108067.626:14136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108069.143:14137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108069.145:14138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108069.603:14139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108069.687:14140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108071.144:14141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108071.148:14142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108071.304:14143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108071.334:14144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108071.369:14145): pid=105683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=105683 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108071.592:14146): pid=105678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=105683 suid=74 rport=44456 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108071.593:14147): pid=105678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=105683 suid=74 rport=44456 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108074.300:14148): pid=105678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=105683 suid=74 rport=44456 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108074.301:14149): pid=105678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=105683 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108074.301:14150): pid=105678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108074.302:14151): pid=105678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=105678 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108074.302:14152): pid=105678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108076.149:14153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108076.152:14154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108076.155:14155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108076.373:14156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108076.437:14157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108076.481:14158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108079.144:14159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108079.274:14160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108080.205:14161): pid=106084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=106084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108080.407:14162): pid=106083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=106084 suid=74 rport=40430 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108080.407:14163): pid=106083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=106084 suid=74 rport=40430 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108082.237:14164): pid=106083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106084 suid=74 rport=40430 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108082.237:14165): pid=106083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=106084 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108082.237:14166): pid=106083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108082.237:14167): pid=106083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=106083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108082.237:14168): pid=106083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108085.341:14169): pid=106480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=106480 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108085.762:14170): pid=106478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=106480 suid=74 rport=52824 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108085.762:14171): pid=106478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=106480 suid=74 rport=52824 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108086.810:14172): pid=106478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106480 suid=74 rport=52824 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108086.810:14173): pid=106478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=106480 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108086.811:14174): pid=106478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108086.812:14175): pid=106478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=106478 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108086.812:14176): pid=106478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108098.152:14177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108098.155:14178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108098.158:14179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108098.161:14180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108098.164:14181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108098.167:14182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108098.411:14183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108098.425:14184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108098.490:14185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108098.512:14186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108098.679:14187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108098.760:14188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108100.146:14189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108100.149:14190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108100.551:14191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108100.683:14192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108102.143:14193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108102.147:14194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108102.312:14195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108102.326:14196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108107.142:14197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108107.145:14198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108107.149:14199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108107.382:14200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108107.417:14201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108107.514:14202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108109.117:14203): pid=108066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=108066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108109.458:14204): pid=108065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=108066 suid=74 rport=57204 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108109.458:14205): pid=108065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=108066 suid=74 rport=57204 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108110.145:14206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108110.317:14207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108111.281:14208): pid=108065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=108066 suid=74 rport=57204 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108111.282:14209): pid=108065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=108066 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108111.283:14210): pid=108065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108111.283:14211): pid=108065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=108065 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108111.284:14212): pid=108065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108114.197:14213): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=98899 suid=1000 rport=46024 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1770108114.198:14214): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=98899 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1770108114.201:14215): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1770108114.202:14216): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1770108114.202:14217): pid=98896 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=98896 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=SERVICE_START msg=audit(1770108129.144:14218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108129.147:14219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108129.150:14220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108129.152:14221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108129.156:14222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108129.159:14223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108129.306:14224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108129.395:14225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108129.422:14226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108129.427:14227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108129.557:14228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108129.598:14229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108131.152:14230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108131.154:14231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108131.569:14232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108131.607:14233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108133.144:14234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108133.146:14235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108133.320:14236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108133.343:14237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108135.550:14238): pid=109594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=109594 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108135.761:14239): pid=109585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=109594 suid=74 rport=40506 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108135.761:14240): pid=109585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=109594 suid=74 rport=40506 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108137.551:14241): pid=109693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=109693 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108138.113:14242): pid=109685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=109693 suid=74 rport=40516 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108138.113:14243): pid=109685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=109693 suid=74 rport=40516 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108138.147:14244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108138.151:14245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108138.154:14246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108138.370:14247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108138.385:14248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108138.598:14249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108138.835:14250): pid=109585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=109594 suid=74 rport=40506 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108138.835:14251): pid=109585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=109594 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108138.836:14252): pid=109585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108138.837:14253): pid=109585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=109585 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108138.837:14254): pid=109585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108139.582:14255): pid=109685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=109693 suid=74 rport=40516 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108139.582:14256): pid=109685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=109693 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108139.583:14257): pid=109685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108139.583:14258): pid=109685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=109685 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108139.583:14259): pid=109685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108141.142:14260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108141.298:14261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108148.242:14262): pid=110327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=110327 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108148.433:14263): pid=110326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=110327 suid=74 rport=45512 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108148.433:14264): pid=110326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=110327 suid=74 rport=45512 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108149.552:14265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108149.553:14266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108150.407:14267): pid=110326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=110327 suid=74 rport=45512 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108150.407:14268): pid=110326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=110327 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108150.408:14269): pid=110326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108150.409:14270): pid=110326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=110326 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108150.409:14271): pid=110326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108159.390:14272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108159.516:14273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108159.520:14274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108159.523:14275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108159.524:14276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108159.636:14277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108159.640:14278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108159.658:14279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108159.781:14280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108159.805:14281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108159.867:14282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108159.881:14283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108162.142:14284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108162.145:14285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108162.565:14286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108162.724:14287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108164.149:14288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108164.153:14289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108164.344:14290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108164.358:14291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108169.146:14292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108169.150:14293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108169.153:14294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108169.334:14295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108169.354:14296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108169.612:14297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108172.148:14298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108172.346:14299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108186.338:14300): pid=112690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=112690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108186.993:14301): pid=112689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=112690 suid=74 rport=52382 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108186.993:14302): pid=112689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=112690 suid=74 rport=52382 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108189.238:14303): pid=112689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=112690 suid=74 rport=52382 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108189.239:14304): pid=112689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=112690 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108189.239:14305): pid=112689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108189.240:14306): pid=112689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=112689 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108189.240:14307): pid=112689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108190.149:14308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108190.152:14309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108190.156:14310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108190.159:14311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108190.162:14312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108190.166:14313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108190.367:14314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108190.384:14315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108190.487:14316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108190.498:14317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108190.535:14318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108190.622:14319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108193.155:14320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108193.158:14321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108193.588:14322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108193.710:14323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108195.143:14324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108195.147:14325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108195.303:14326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108195.346:14327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108200.146:14328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108200.150:14329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108200.153:14330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108200.393:14331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108200.426:14332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108200.476:14333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108202.075:14334): pid=113616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=113616 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1770108203.146:14335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108203.311:14336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770108203.325:14337): pid=113615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=113616 suid=74 rport=43582 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108203.325:14338): pid=113615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=113616 suid=74 rport=43582 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108207.307:14339): pid=113615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=113616 suid=74 rport=43582 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108207.308:14340): pid=113615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=113616 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108207.308:14341): pid=113615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108207.309:14342): pid=113615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=113615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108207.309:14343): pid=113615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108220.936:14344): pid=114594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=114594 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108220.976:14345): pid=114585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=114594 suid=74 rport=41306 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108220.976:14346): pid=114585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=114594 suid=74 rport=41306 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108221.145:14347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108221.148:14348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108221.152:14349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108221.157:14350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108221.161:14351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108221.166:14352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108221.273:14353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108221.445:14354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108221.459:14355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108221.497:14356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108221.664:14357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108221.694:14358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108222.827:14359): pid=114585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=114594 suid=74 rport=41306 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108222.828:14360): pid=114585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=114594 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108222.828:14361): pid=114585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108222.829:14362): pid=114585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=114585 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108222.829:14363): pid=114585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108224.144:14364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108224.147:14365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108224.643:14366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108224.698:14367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108226.140:14368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108226.142:14369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108226.322:14370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108226.356:14371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108231.145:14372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108231.148:14373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108231.152:14374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108231.274:14375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108231.493:14376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108231.616:14377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108234.141:14378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108234.313:14379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108241.180:14380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108241.180:14381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108252.149:14382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108252.153:14383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108252.156:14384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108252.161:14385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108252.166:14386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108252.172:14387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108252.283:14388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108252.397:14389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108252.410:14390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108252.514:14391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108252.526:14392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108252.598:14393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108255.141:14394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108255.145:14395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108255.566:14396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108255.603:14397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108257.141:14398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108257.145:14399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108257.295:14400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108257.382:14401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108262.146:14402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108262.150:14403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108262.154:14404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108262.383:14405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108262.406:14406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108262.518:14407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108265.148:14408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108265.322:14409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108267.501:14410): pid=117668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=117668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108267.758:14411): pid=117667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=117668 suid=74 rport=33212 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108267.758:14412): pid=117667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=117668 suid=74 rport=33212 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108269.406:14413): pid=117667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=117668 suid=74 rport=33212 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108269.406:14414): pid=117667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=117668 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108269.407:14415): pid=117667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108269.407:14416): pid=117667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=117667 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108269.407:14417): pid=117667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108283.148:14418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108283.150:14419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108283.153:14420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108283.156:14421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108283.159:14422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108283.162:14423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108283.278:14424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108283.317:14425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108283.383:14426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108283.448:14427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108283.484:14428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108283.565:14429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108286.153:14430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108286.156:14431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108286.535:14432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108286.683:14433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108288.141:14434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108288.144:14435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108288.349:14436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108288.374:14437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108293.145:14438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108293.148:14439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108293.151:14440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108293.296:14441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108293.349:14442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108293.559:14443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108296.141:14444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108296.325:14445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108311.179:14446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108311.179:14447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108314.157:14448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108314.161:14449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108314.163:14450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108314.166:14451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108314.169:14452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108314.173:14453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108314.403:14454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108314.445:14455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108314.494:14456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108314.513:14457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108314.583:14458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108314.634:14459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108317.138:14460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108317.140:14461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108317.545:14462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108317.581:14463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108319.141:14464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108319.144:14465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108319.310:14466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108319.344:14467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108323.253:14468): pid=120870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=120870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1770108324.142:14469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108324.144:14470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108324.147:14471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108324.341:14472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108324.400:14473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108324.608:14474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108327.141:14475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108327.345:14476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108345.144:14477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108345.147:14478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108345.150:14479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108345.154:14480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108345.156:14481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108345.160:14482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108345.360:14483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108345.366:14484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108345.385:14485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108345.460:14486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108345.543:14487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108345.562:14488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108345.987:14489): pid=122312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=122312 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108346.228:14490): pid=122311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=122312 suid=74 rport=40422 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108346.228:14491): pid=122311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=122312 suid=74 rport=40422 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108346.595:14492): pid=122437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=122437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108346.859:14493): pid=122436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=122437 suid=74 rport=39732 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108346.859:14494): pid=122436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=122437 suid=74 rport=39732 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108348.140:14495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108348.143:14496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108348.586:14497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108348.649:14498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770108348.766:14499): pid=120816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=120870 suid=74 rport=52072 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108348.766:14500): pid=120816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=120870 suid=74 rport=52072 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108349.626:14501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108349.629:14502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108349.773:14503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108349.793:14504): pid=122436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=122437 suid=74 rport=39732 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108349.794:14505): pid=122436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=122437 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108349.794:14506): pid=122436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108349.795:14507): pid=122436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=122436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108349.795:14508): pid=122436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108349.854:14509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108349.891:14510): pid=120816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=120870 suid=74 rport=52072 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108349.891:14511): pid=120816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=120870 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108349.892:14512): pid=120816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108349.892:14513): pid=120816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=120816 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108349.892:14514): pid=120816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108355.144:14515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108355.147:14516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108355.149:14517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108355.305:14518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108355.387:14519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108355.586:14520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108358.610:14521): pid=123219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=123219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1770108359.212:14522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108359.393:14523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770108361.059:14524): pid=123218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=123219 suid=74 rport=50420 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108361.059:14525): pid=123218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=123219 suid=74 rport=50420 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108362.667:14526): pid=123218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=123219 suid=74 rport=50420 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108362.667:14527): pid=123218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=123219 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108362.668:14528): pid=123218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108362.668:14529): pid=123218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=123218 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108362.668:14530): pid=123218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108369.670:14531): pid=122311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=122312 suid=74 rport=40422 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108369.670:14532): pid=122311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=122312 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108369.671:14533): pid=122311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108369.671:14534): pid=122311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=122311 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108369.671:14535): pid=122311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108376.145:14536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108376.148:14537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108376.150:14538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108376.153:14539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108376.156:14540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108376.159:14541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108376.286:14542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108376.302:14543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108376.354:14544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108376.458:14545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108376.478:14546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108376.491:14547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108379.140:14548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108379.143:14549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108379.582:14550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108379.593:14551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108380.145:14552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108380.148:14553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108380.333:14554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108380.349:14555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108386.142:14556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108386.145:14557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108386.148:14558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108386.273:14559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108386.423:14560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108386.574:14561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108390.130:14562): pid=124947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=124947 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1770108390.152:14563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108390.334:14564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770108390.373:14565): pid=124940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=124947 suid=74 rport=36906 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108390.373:14566): pid=124940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=124947 suid=74 rport=36906 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108391.709:14567): pid=124940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=124947 suid=74 rport=36906 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108391.709:14568): pid=124940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=124947 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108391.710:14569): pid=124940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108391.710:14570): pid=124940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=124940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108391.710:14571): pid=124940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108399.523:14572): pid=125625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125625 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108399.524:14573): pid=125618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=125625 suid=74 rport=41056 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108399.524:14574): pid=125618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=125625 suid=74 rport=41056 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108399.612:14575): pid=125618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108399.613:14576): pid=125618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108399.640:14577): pid=125618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108399.640:14578): pid=125618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=125625 suid=74 rport=41056 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108399.642:14579): pid=125618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108399.642:14580): pid=125618 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=19 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108399.642:14580): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcf2913cb0 a2=1 a3=0 items=0 ppid=40636 pid=125618 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108399.642:14580): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108399.644:14581): pid=125618 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108399.690:14582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108399.721:14583): pid=125635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1770108399.721:14584): pid=125635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1770108399.722:14585): pid=125635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108399.722:14586): pid=125635 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=20 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108399.722:14586): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd711b5940 a2=1 a3=0 items=0 ppid=1 pid=125635 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108399.722:14586): proctitle="(systemd)" type=USER_START msg=audit(1770108399.725:14587): pid=125635 uid=0 auid=0 ses=20 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1770108399.746:14588): prog-id=1020 op=LOAD type=SYSCALL msg=audit(1770108399.746:14588): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd37b09a80 a2=90 a3=0 items=0 ppid=1 pid=125635 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108399.746:14588): proctitle="(systemd)" type=BPF msg=audit(1770108399.747:14589): prog-id=0 op=UNLOAD type=BPF msg=audit(1770108399.747:14590): prog-id=1021 op=LOAD type=SYSCALL msg=audit(1770108399.747:14590): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd37b09b20 a2=90 a3=4 items=0 ppid=1 pid=125635 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108399.747:14590): proctitle="(systemd)" type=BPF msg=audit(1770108399.747:14591): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770108399.903:14592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770108399.929:14593): pid=125618 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108399.931:14594): pid=125650 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108399.931:14595): pid=125650 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108399.976:14596): pid=125618 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108399.976:14597): pid=125618 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108399.978:14598): pid=125618 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125651 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108400.046:14599): pid=125651 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108400.046:14600): pid=125651 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108400.047:14601): pid=125651 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108400.052:14602): pid=125651 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108400.066:14603): pid=125651 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108400.066:14604): pid=125651 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108400.068:14605): pid=125618 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108400.068:14606): pid=125618 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108400.069:14607): pid=125618 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=125650 suid=0 rport=41056 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108400.069:14608): pid=125618 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108400.073:14609): pid=125618 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108400.073:14610): pid=125618 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108400.074:14611): pid=125618 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108400.689:14612): pid=125675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125675 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108400.691:14613): pid=125674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=125675 suid=74 rport=41060 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108400.691:14614): pid=125674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=125675 suid=74 rport=41060 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108400.768:14615): pid=125674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108400.768:14616): pid=125674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108400.796:14617): pid=125674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108400.797:14618): pid=125674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=125675 suid=74 rport=41060 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108400.799:14619): pid=125674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108400.799:14620): pid=125674 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=21 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108400.799:14620): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffed12d8820 a2=1 a3=0 items=0 ppid=40636 pid=125674 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108400.799:14620): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108400.801:14621): pid=125674 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108400.838:14622): pid=125674 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108400.839:14623): pid=125677 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125677 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108400.840:14624): pid=125677 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108400.884:14625): pid=125674 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108400.884:14626): pid=125674 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108400.886:14627): pid=125674 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125678 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108400.946:14628): pid=125678 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108400.947:14629): pid=125678 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108400.947:14630): pid=125678 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108400.951:14631): pid=125678 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108400.961:14632): pid=125678 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108400.962:14633): pid=125678 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108400.965:14634): pid=125674 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=125677 suid=0 rport=41060 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108400.965:14635): pid=125674 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125677 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108400.968:14636): pid=125674 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108400.968:14637): pid=125674 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108400.969:14638): pid=125674 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108400.969:14639): pid=125674 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108400.969:14640): pid=125674 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125674 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108401.557:14641): pid=125702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125702 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108401.558:14642): pid=125701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=125702 suid=74 rport=41066 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108401.558:14643): pid=125701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=125702 suid=74 rport=41066 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108401.642:14644): pid=125701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108401.642:14645): pid=125701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108401.658:14646): pid=125701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108401.658:14647): pid=125701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=125702 suid=74 rport=41066 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108401.660:14648): pid=125701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108401.660:14649): pid=125701 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=22 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108401.660:14649): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffccffb7770 a2=1 a3=0 items=0 ppid=40636 pid=125701 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108401.660:14649): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108401.662:14650): pid=125701 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108401.684:14651): pid=125701 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108401.686:14652): pid=125704 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125704 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108401.686:14653): pid=125704 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108401.729:14654): pid=125701 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108401.729:14655): pid=125701 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108401.732:14656): pid=125701 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125705 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108401.788:14657): pid=125705 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108401.789:14658): pid=125705 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6576616C7561746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108401.789:14659): pid=125705 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108401.792:14660): pid=125705 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108401.801:14661): pid=125705 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108401.802:14662): pid=125705 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108401.803:14663): pid=125701 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=125704 suid=0 rport=41066 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108401.804:14664): pid=125701 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125704 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108401.806:14665): pid=125701 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108401.806:14666): pid=125701 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108401.807:14667): pid=125701 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108401.807:14668): pid=125701 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108401.807:14669): pid=125701 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108402.379:14670): pid=125721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125721 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108402.380:14671): pid=125720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=125721 suid=74 rport=41068 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108402.381:14672): pid=125720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=125721 suid=74 rport=41068 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108402.456:14673): pid=125720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108402.456:14674): pid=125720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108402.484:14675): pid=125720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108402.485:14676): pid=125720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=125721 suid=74 rport=41068 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108402.487:14677): pid=125720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108402.487:14678): pid=125720 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=23 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108402.487:14678): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffed5650f10 a2=1 a3=0 items=0 ppid=40636 pid=125720 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108402.487:14678): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108402.489:14679): pid=125720 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108402.513:14680): pid=125720 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108402.514:14681): pid=125731 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125731 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108402.515:14682): pid=125731 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108402.557:14683): pid=125720 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108402.557:14684): pid=125720 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108402.558:14685): pid=125720 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108402.612:14686): pid=125732 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108402.612:14687): pid=125732 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6C697374656E65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108402.613:14688): pid=125732 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108402.616:14689): pid=125732 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108402.626:14690): pid=125732 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108402.626:14691): pid=125732 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108402.628:14692): pid=125720 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=125731 suid=0 rport=41068 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108402.628:14693): pid=125720 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125731 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108402.630:14694): pid=125720 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108402.631:14695): pid=125720 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108402.631:14696): pid=125720 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108402.631:14697): pid=125720 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108402.632:14698): pid=125720 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125720 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108403.226:14699): pid=125750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125750 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108403.226:14700): pid=125749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=125750 suid=74 rport=41076 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108403.226:14701): pid=125749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=125750 suid=74 rport=41076 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108403.299:14702): pid=125749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108403.299:14703): pid=125749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108403.325:14704): pid=125749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108403.326:14705): pid=125749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=125750 suid=74 rport=41076 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108403.328:14706): pid=125749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108403.328:14707): pid=125749 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=24 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108403.328:14707): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe6b566eb0 a2=1 a3=0 items=0 ppid=40636 pid=125749 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108403.328:14707): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108403.329:14708): pid=125749 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108403.362:14709): pid=125749 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108403.363:14710): pid=125752 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108403.364:14711): pid=125752 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108403.406:14712): pid=125749 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108403.406:14713): pid=125749 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108403.408:14714): pid=125749 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125753 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108403.458:14715): pid=125753 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108403.458:14716): pid=125753 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6E6F7469666965722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108403.459:14717): pid=125753 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108403.462:14718): pid=125753 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108403.473:14719): pid=125753 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108403.475:14720): pid=125753 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108403.477:14721): pid=125749 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=125752 suid=0 rport=41076 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108403.478:14722): pid=125749 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108403.480:14723): pid=125749 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108403.480:14724): pid=125749 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108403.481:14725): pid=125749 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108403.481:14726): pid=125749 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108403.481:14727): pid=125749 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108404.960:14728): pid=125948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125948 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108404.961:14729): pid=125947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=125948 suid=74 rport=41086 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108404.961:14730): pid=125947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=125948 suid=74 rport=41086 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108405.035:14731): pid=125947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108405.035:14732): pid=125947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108405.064:14733): pid=125947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108405.065:14734): pid=125947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=125948 suid=74 rport=41086 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108405.067:14735): pid=125947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108405.067:14736): pid=125947 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=25 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108405.067:14736): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcea8c30b0 a2=1 a3=0 items=0 ppid=40636 pid=125947 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108405.067:14736): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108405.068:14737): pid=125947 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108405.096:14738): pid=125947 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108405.098:14739): pid=125950 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108405.099:14740): pid=125950 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108405.141:14741): pid=125947 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108405.141:14742): pid=125947 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108405.143:14743): pid=125947 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125951 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108405.206:14744): pid=125951 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108405.206:14745): pid=125951 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F63656E7472616C2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108405.207:14746): pid=125951 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108405.211:14747): pid=125951 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108405.226:14748): pid=125951 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108405.226:14749): pid=125951 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108405.229:14750): pid=125947 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=125950 suid=0 rport=41086 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108405.229:14751): pid=125947 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108405.232:14752): pid=125947 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108405.233:14753): pid=125947 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108405.233:14754): pid=125947 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108405.235:14755): pid=125947 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108405.235:14756): pid=125947 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125947 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108405.359:14757): pid=125982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108405.666:14758): pid=125973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=125982 suid=74 rport=57078 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108405.666:14759): pid=125973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=125982 suid=74 rport=57078 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108407.154:14760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108407.160:14761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108407.163:14762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108407.168:14763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108407.172:14764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108407.175:14765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108407.304:14766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108407.367:14767): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108407.567:14768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108407.616:14769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108407.701:14770): pid=125973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=125982 suid=74 rport=57078 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108407.701:14771): pid=125973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125982 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108407.704:14772): pid=125973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108407.705:14773): pid=125973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=125973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108407.705:14774): pid=125973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108407.756:14775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108407.809:14776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108408.315:14777): pid=126399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108408.316:14778): pid=126398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126399 suid=74 rport=49708 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108408.317:14779): pid=126398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126399 suid=74 rport=49708 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108408.387:14780): pid=126398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108408.387:14781): pid=126398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108408.415:14782): pid=126398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108408.415:14783): pid=126398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126399 suid=74 rport=49708 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108408.417:14784): pid=126398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108408.418:14785): pid=126398 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=26 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108408.418:14785): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe3003ab60 a2=1 a3=0 items=0 ppid=40636 pid=126398 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108408.418:14785): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108408.419:14786): pid=126398 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108408.448:14787): pid=126398 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108408.449:14788): pid=126401 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108408.450:14789): pid=126401 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108408.493:14790): pid=126398 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108408.493:14791): pid=126398 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108408.495:14792): pid=126398 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126402 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108408.555:14793): pid=126402 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108408.556:14794): pid=126402 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F6E6F74696669636174696F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108408.557:14795): pid=126402 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108408.562:14796): pid=126402 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108408.575:14797): pid=126402 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108408.575:14798): pid=126402 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108408.577:14799): pid=126398 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126401 suid=0 rport=49708 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108408.577:14800): pid=126398 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108408.580:14801): pid=126398 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108408.580:14802): pid=126398 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108408.581:14803): pid=126398 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108408.581:14804): pid=126398 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108408.581:14805): pid=126398 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108409.219:14806): pid=126426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108409.221:14807): pid=126425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126426 suid=74 rport=49716 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108409.221:14808): pid=126425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126426 suid=74 rport=49716 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108409.299:14809): pid=126425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108409.300:14810): pid=126425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108409.327:14811): pid=126425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108409.328:14812): pid=126425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126426 suid=74 rport=49716 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108409.330:14813): pid=126425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108409.330:14814): pid=126425 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=27 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108409.330:14814): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff2cc89040 a2=1 a3=0 items=0 ppid=40636 pid=126425 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108409.330:14814): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108409.332:14815): pid=126425 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108409.360:14816): pid=126425 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108409.362:14817): pid=126428 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126428 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108409.363:14818): pid=126428 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108409.407:14819): pid=126425 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108409.407:14820): pid=126425 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108409.410:14821): pid=126425 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126429 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108409.473:14822): pid=126429 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108409.473:14823): pid=126429 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F6374617669615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108409.475:14824): pid=126429 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108409.480:14825): pid=126429 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108409.494:14826): pid=126429 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108409.494:14827): pid=126429 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108409.497:14828): pid=126425 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126428 suid=0 rport=49716 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108409.497:14829): pid=126425 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126428 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108409.500:14830): pid=126425 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108409.500:14831): pid=126425 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108409.501:14832): pid=126425 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108409.501:14833): pid=126425 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108409.501:14834): pid=126425 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108409.988:14835): pid=126453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126453 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108410.123:14836): pid=126455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126455 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108410.124:14837): pid=126454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126455 suid=74 rport=49722 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108410.124:14838): pid=126454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126455 suid=74 rport=49722 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108410.142:14839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108410.145:14840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108410.175:14841): pid=126473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126473 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_AUTH msg=audit(1770108410.196:14842): pid=126454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108410.196:14843): pid=126454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108410.224:14844): pid=126454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108410.224:14845): pid=126454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126455 suid=74 rport=49722 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108410.227:14846): pid=126454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108410.227:14847): pid=126454 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=28 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108410.227:14847): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff53f12650 a2=1 a3=0 items=0 ppid=40636 pid=126454 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108410.227:14847): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108410.229:14848): pid=126454 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_SESSION msg=audit(1770108410.258:14849): pid=126452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=126453 suid=74 rport=34864 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108410.258:14850): pid=126452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=126453 suid=74 rport=34864 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_START msg=audit(1770108410.285:14851): pid=126454 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108410.286:14852): pid=126497 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126497 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108410.287:14853): pid=126497 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108410.330:14854): pid=126454 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108410.330:14855): pid=126454 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108410.332:14856): pid=126454 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108410.390:14857): pid=126504 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108410.390:14858): pid=126504 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F6374617669615F6865616C74685F6D616E616765722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108410.392:14859): pid=126504 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108410.419:14860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770108410.423:14861): pid=126504 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108410.423:14862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770108410.436:14863): pid=126504 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108410.436:14864): pid=126504 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108410.439:14865): pid=126454 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126497 suid=0 rport=49722 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108410.439:14866): pid=126454 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126497 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108410.442:14867): pid=126454 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108410.443:14868): pid=126454 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108410.443:14869): pid=126454 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108410.443:14870): pid=126454 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108410.443:14871): pid=126454 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126454 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_SESSION msg=audit(1770108410.445:14872): pid=126467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=126473 suid=74 rport=34888 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108410.446:14873): pid=126467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=126473 suid=74 rport=34888 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770108410.628:14874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108410.640:14875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108410.652:14876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108410.694:14877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108411.070:14878): pid=126582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126582 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108411.072:14879): pid=126581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126582 suid=74 rport=49738 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108411.072:14880): pid=126581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126582 suid=74 rport=49738 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108411.142:14881): pid=126581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108411.142:14882): pid=126581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108411.170:14883): pid=126581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108411.171:14884): pid=126581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126582 suid=74 rport=49738 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108411.173:14885): pid=126581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108411.173:14886): pid=126581 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=29 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108411.173:14886): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd70946b40 a2=1 a3=0 items=0 ppid=40636 pid=126581 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108411.173:14886): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108411.175:14887): pid=126581 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108411.214:14888): pid=126581 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108411.216:14889): pid=126584 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108411.217:14890): pid=126584 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108411.261:14891): pid=126581 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108411.261:14892): pid=126581 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108411.265:14893): pid=126581 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126585 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108411.338:14894): pid=126585 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108411.339:14895): pid=126585 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F6374617669615F727379736C6F672E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108411.341:14896): pid=126585 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108411.346:14897): pid=126585 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108411.360:14898): pid=126585 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108411.361:14899): pid=126585 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108411.364:14900): pid=126581 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126584 suid=0 rport=49738 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108411.364:14901): pid=126581 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108411.368:14902): pid=126581 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108411.368:14903): pid=126581 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108411.369:14904): pid=126581 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108411.369:14905): pid=126581 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108411.369:14906): pid=126581 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108411.528:14907): pid=126467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126473 suid=74 rport=34888 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108411.529:14908): pid=126467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126473 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108411.529:14909): pid=126467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108411.530:14910): pid=126467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126467 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108411.530:14911): pid=126467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108412.060:14912): pid=126610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126610 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108412.062:14913): pid=126609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126610 suid=74 rport=49740 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108412.062:14914): pid=126609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126610 suid=74 rport=49740 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108412.114:14915): pid=126452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126453 suid=74 rport=34864 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108412.114:14916): pid=126452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126453 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108412.115:14917): pid=126452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108412.116:14918): pid=126452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108412.116:14919): pid=126452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1770108412.139:14920): pid=126609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108412.139:14921): pid=126609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108412.167:14922): pid=126609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108412.167:14923): pid=126609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126610 suid=74 rport=49740 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108412.170:14924): pid=126609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108412.170:14925): pid=126609 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=30 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108412.170:14925): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd60b21c40 a2=1 a3=0 items=0 ppid=40636 pid=126609 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108412.170:14925): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108412.172:14926): pid=126609 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108412.199:14927): pid=126609 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108412.201:14928): pid=126612 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126612 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108412.202:14929): pid=126612 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108412.288:14930): pid=126609 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108412.288:14931): pid=126609 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108412.290:14932): pid=126609 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126613 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108412.351:14933): pid=126613 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108412.351:14934): pid=126613 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F6374617669615F6472697665725F6167656E742E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108412.353:14935): pid=126613 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108412.359:14936): pid=126613 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108412.373:14937): pid=126613 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108412.374:14938): pid=126613 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108412.377:14939): pid=126609 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126612 suid=0 rport=49740 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108412.377:14940): pid=126609 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126612 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108412.380:14941): pid=126609 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108412.380:14942): pid=126609 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108412.381:14943): pid=126609 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108412.381:14944): pid=126609 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108412.381:14945): pid=126609 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126609 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108412.998:14946): pid=126639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108413.000:14947): pid=126638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126639 suid=74 rport=49742 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108413.000:14948): pid=126638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126639 suid=74 rport=49742 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108413.083:14949): pid=126638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108413.084:14950): pid=126638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108413.112:14951): pid=126638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108413.113:14952): pid=126638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126639 suid=74 rport=49742 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108413.115:14953): pid=126638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108413.115:14954): pid=126638 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=31 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108413.115:14954): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffeafe2fd80 a2=1 a3=0 items=0 ppid=40636 pid=126638 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108413.115:14954): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108413.117:14955): pid=126638 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108413.152:14956): pid=126638 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108413.153:14957): pid=126641 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126641 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108413.154:14958): pid=126641 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108413.196:14959): pid=126638 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108413.196:14960): pid=126638 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108413.198:14961): pid=126638 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126642 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108413.259:14962): pid=126642 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108413.259:14963): pid=126642 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F6374617669615F686F7573656B656570696E672E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108413.260:14964): pid=126642 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108413.264:14965): pid=126642 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108413.277:14966): pid=126642 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108413.277:14967): pid=126642 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108413.280:14968): pid=126638 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126641 suid=0 rport=49742 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108413.280:14969): pid=126638 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126641 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108413.283:14970): pid=126638 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108413.283:14971): pid=126638 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108413.284:14972): pid=126638 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108413.284:14973): pid=126638 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108413.284:14974): pid=126638 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108413.861:14975): pid=126666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126666 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108413.862:14976): pid=126665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126666 suid=74 rport=49752 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108413.862:14977): pid=126665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126666 suid=74 rport=49752 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108413.948:14978): pid=126665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108413.948:14979): pid=126665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108414.021:14980): pid=126665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108414.021:14981): pid=126665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126666 suid=74 rport=49752 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108414.023:14982): pid=126665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108414.023:14983): pid=126665 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=32 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108414.023:14983): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffde0fa11b0 a2=1 a3=0 items=0 ppid=40636 pid=126665 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108414.023:14983): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108414.026:14984): pid=126665 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108414.062:14985): pid=126665 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108414.064:14986): pid=126668 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108414.065:14987): pid=126668 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108414.108:14988): pid=126665 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108414.108:14989): pid=126665 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108414.111:14990): pid=126665 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126675 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108414.178:14991): pid=126675 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108414.179:14992): pid=126675 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F6374617669615F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108414.179:14993): pid=126675 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108414.183:14994): pid=126675 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108414.193:14995): pid=126675 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108414.193:14996): pid=126675 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108414.197:14997): pid=126665 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126668 suid=0 rport=49752 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108414.197:14998): pid=126665 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108414.200:14999): pid=126665 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108414.200:15000): pid=126665 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108414.201:15001): pid=126665 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108414.201:15002): pid=126665 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108414.201:15003): pid=126665 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126665 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108414.850:15004): pid=126746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108414.851:15005): pid=126745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126746 suid=74 rport=49762 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108414.851:15006): pid=126745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126746 suid=74 rport=49762 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108414.927:15007): pid=126745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108414.927:15008): pid=126745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108414.955:15009): pid=126745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108414.955:15010): pid=126745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126746 suid=74 rport=49762 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108414.957:15011): pid=126745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108414.958:15012): pid=126745 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=33 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108414.958:15012): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe8af06650 a2=1 a3=0 items=0 ppid=40636 pid=126745 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108414.958:15012): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108414.959:15013): pid=126745 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108414.993:15014): pid=126745 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108414.994:15015): pid=126748 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108414.995:15016): pid=126748 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108415.038:15017): pid=126745 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108415.038:15018): pid=126745 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108415.041:15019): pid=126745 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108415.104:15020): pid=126749 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108415.104:15021): pid=126749 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F64657369676E6174655F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108415.105:15022): pid=126749 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108415.108:15023): pid=126749 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108415.122:15024): pid=126749 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108415.122:15025): pid=126749 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108415.125:15026): pid=126745 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126748 suid=0 rport=49762 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108415.126:15027): pid=126745 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108415.129:15028): pid=126745 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108415.129:15029): pid=126745 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108415.130:15030): pid=126745 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108415.130:15031): pid=126745 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108415.131:15032): pid=126745 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126745 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108415.798:15033): pid=126772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126772 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108415.800:15034): pid=126768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126772 suid=74 rport=59304 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108415.800:15035): pid=126768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126772 suid=74 rport=59304 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108415.873:15036): pid=126768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108415.873:15037): pid=126768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108415.901:15038): pid=126768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108415.901:15039): pid=126768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126772 suid=74 rport=59304 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108415.907:15040): pid=126768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108415.907:15041): pid=126768 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=34 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108415.907:15041): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe8dee2ac0 a2=1 a3=0 items=0 ppid=40636 pid=126768 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=34 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108415.907:15041): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108415.909:15042): pid=126768 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108415.945:15043): pid=126768 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108415.946:15044): pid=126775 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126775 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108415.947:15045): pid=126775 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108415.990:15046): pid=126768 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108415.990:15047): pid=126768 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108415.992:15048): pid=126768 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108416.061:15049): pid=126776 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108416.062:15050): pid=126776 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F64657369676E6174655F6261636B656E645F62696E64392E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108416.063:15051): pid=126776 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108416.067:15052): pid=126776 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108416.079:15053): pid=126776 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108416.079:15054): pid=126776 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108416.082:15055): pid=126768 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126775 suid=0 rport=59304 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108416.082:15056): pid=126768 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126775 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108416.085:15057): pid=126768 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108416.085:15058): pid=126768 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108416.086:15059): pid=126768 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108416.086:15060): pid=126768 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108416.086:15061): pid=126768 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126768 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108416.732:15062): pid=126874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126874 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108416.734:15063): pid=126873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126874 suid=74 rport=59310 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108416.734:15064): pid=126873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=126874 suid=74 rport=59310 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108416.812:15065): pid=126873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108416.812:15066): pid=126873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108416.839:15067): pid=126873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108416.840:15068): pid=126873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126874 suid=74 rport=59310 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108416.843:15069): pid=126873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108416.843:15070): pid=126873 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=35 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108416.843:15070): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcfcf41b90 a2=1 a3=0 items=0 ppid=40636 pid=126873 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=35 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108416.843:15070): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108416.845:15071): pid=126873 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108416.864:15072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108416.867:15073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108416.870:15074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770108416.888:15075): pid=126873 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108416.890:15076): pid=126953 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126953 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108416.890:15077): pid=126953 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108416.933:15078): pid=126873 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108416.933:15079): pid=126873 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108416.935:15080): pid=126873 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126965 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108417.000:15081): pid=126965 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108417.000:15082): pid=126965 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F64657369676E6174655F63656E7472616C2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108417.001:15083): pid=126965 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108417.005:15084): pid=126965 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108417.017:15085): pid=126965 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108417.017:15086): pid=126965 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108417.020:15087): pid=126873 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126953 suid=0 rport=59310 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108417.021:15088): pid=126873 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126953 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108417.023:15089): pid=126873 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108417.023:15090): pid=126873 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108417.024:15091): pid=126873 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108417.024:15092): pid=126873 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108417.024:15093): pid=126873 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=126873 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1770108417.125:15094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108417.189:15095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108417.236:15096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108417.648:15097): pid=127134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108417.650:15098): pid=127110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=127134 suid=74 rport=59318 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108417.651:15099): pid=127110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=127134 suid=74 rport=59318 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108417.741:15100): pid=127110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108417.742:15101): pid=127110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108417.771:15102): pid=127110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108417.772:15103): pid=127110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127134 suid=74 rport=59318 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108417.775:15104): pid=127110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108417.775:15105): pid=127110 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=36 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108417.775:15105): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffff2475f90 a2=1 a3=0 items=0 ppid=40636 pid=127110 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=36 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108417.775:15105): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108417.777:15106): pid=127110 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108417.817:15107): pid=127110 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108417.818:15108): pid=127189 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127189 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108417.819:15109): pid=127189 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108417.862:15110): pid=127110 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108417.862:15111): pid=127110 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108417.865:15112): pid=127110 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127226 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108417.921:15113): pid=127226 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108417.922:15114): pid=127226 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F64657369676E6174655F6D646E732E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108417.925:15115): pid=127226 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108417.931:15116): pid=127226 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108417.942:15117): pid=127226 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108417.942:15118): pid=127226 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108417.944:15119): pid=127110 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127189 suid=0 rport=59318 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108417.944:15120): pid=127110 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127189 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108417.947:15121): pid=127110 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108417.947:15122): pid=127110 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108417.948:15123): pid=127110 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108417.948:15124): pid=127110 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108417.948:15125): pid=127110 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127110 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108418.550:15126): pid=127244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108418.552:15127): pid=127242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=127244 suid=74 rport=59330 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108418.552:15128): pid=127242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=127244 suid=74 rport=59330 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108418.561:15129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108418.561:15130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1770108418.625:15131): pid=127242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108418.625:15132): pid=127242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108418.653:15133): pid=127242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108418.654:15134): pid=127242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127244 suid=74 rport=59330 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108418.656:15135): pid=127242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108418.656:15136): pid=127242 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=37 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108418.656:15136): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdd46f1050 a2=1 a3=0 items=0 ppid=40636 pid=127242 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=37 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108418.656:15136): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108418.658:15137): pid=127242 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108418.692:15138): pid=127242 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108418.694:15139): pid=127261 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127261 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108418.694:15140): pid=127261 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108418.738:15141): pid=127242 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108418.738:15142): pid=127242 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108418.742:15143): pid=127242 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127275 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108418.789:15144): pid=127275 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108418.790:15145): pid=127275 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F64657369676E6174655F70726F64756365722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108418.792:15146): pid=127275 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108418.795:15147): pid=127275 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108418.804:15148): pid=127275 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108418.805:15149): pid=127275 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108418.807:15150): pid=127242 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127261 suid=0 rport=59330 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108418.807:15151): pid=127242 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127261 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108418.809:15152): pid=127242 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108418.809:15153): pid=127242 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108418.810:15154): pid=127242 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108418.810:15155): pid=127242 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108418.810:15156): pid=127242 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108419.394:15157): pid=127336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127336 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108419.395:15158): pid=127335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=127336 suid=74 rport=59340 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108419.395:15159): pid=127335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=127336 suid=74 rport=59340 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108419.465:15160): pid=127335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108419.466:15161): pid=127335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108419.487:15162): pid=127335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108419.487:15163): pid=127335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127336 suid=74 rport=59340 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108419.489:15164): pid=127335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108419.489:15165): pid=127335 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=38 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108419.489:15165): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd92cfa1b0 a2=1 a3=0 items=0 ppid=40636 pid=127335 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=38 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108419.489:15165): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108419.490:15166): pid=127335 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108419.529:15167): pid=127335 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108419.530:15168): pid=127339 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108419.531:15169): pid=127339 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108419.573:15170): pid=127335 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108419.573:15171): pid=127335 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108419.574:15172): pid=127335 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108419.635:15173): pid=127340 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108419.635:15174): pid=127340 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F64657369676E6174655F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108419.636:15175): pid=127340 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108419.640:15176): pid=127340 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108419.655:15177): pid=127340 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108419.656:15178): pid=127340 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108419.658:15179): pid=127335 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127339 suid=0 rport=59340 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108419.659:15180): pid=127335 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108419.661:15181): pid=127335 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108419.662:15182): pid=127335 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108419.663:15183): pid=127335 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108419.663:15184): pid=127335 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108419.663:15185): pid=127335 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108420.273:15186): pid=127365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127365 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108420.275:15187): pid=127364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=127365 suid=74 rport=59342 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108420.275:15188): pid=127364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=127365 suid=74 rport=59342 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108420.348:15189): pid=127364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108420.348:15190): pid=127364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108420.374:15191): pid=127364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108420.374:15192): pid=127364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127365 suid=74 rport=59342 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108420.376:15193): pid=127364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108420.377:15194): pid=127364 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=39 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108420.377:15194): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff83f3dbd0 a2=1 a3=0 items=0 ppid=40636 pid=127364 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=39 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108420.377:15194): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108420.378:15195): pid=127364 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108420.400:15196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770108420.416:15197): pid=127364 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108420.418:15198): pid=127373 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108420.418:15199): pid=127373 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108420.461:15200): pid=127364 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108420.461:15201): pid=127364 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108420.462:15202): pid=127364 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127379 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108420.519:15203): pid=127379 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108420.519:15204): pid=127379 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F756E626F756E642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108420.520:15205): pid=127379 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108420.523:15206): pid=127379 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108420.534:15207): pid=127379 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108420.534:15208): pid=127379 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108420.536:15209): pid=127364 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127373 suid=0 rport=59342 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108420.536:15210): pid=127364 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108420.539:15211): pid=127364 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108420.539:15212): pid=127364 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108420.540:15213): pid=127364 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108420.540:15214): pid=127364 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108420.540:15215): pid=127364 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127364 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1770108420.574:15216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108423.527:15217): pid=127447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108423.785:15218): pid=127446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=127447 suid=74 rport=59354 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108423.785:15219): pid=127446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=127447 suid=74 rport=59354 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108424.923:15220): pid=127510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108424.925:15221): pid=127509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=127510 suid=74 rport=59356 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108424.925:15222): pid=127509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=127510 suid=74 rport=59356 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108424.997:15223): pid=127509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108424.997:15224): pid=127509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108425.023:15225): pid=127509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108425.023:15226): pid=127509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127510 suid=74 rport=59356 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108425.025:15227): pid=127509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108425.026:15228): pid=127509 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=40 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108425.026:15228): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd0b0ae9a0 a2=1 a3=0 items=0 ppid=40636 pid=127509 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=40 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108425.026:15228): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108425.027:15229): pid=127509 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108425.044:15230): pid=127446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127447 suid=74 rport=59354 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108425.045:15231): pid=127446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127447 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108425.057:15232): pid=127446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108425.058:15233): pid=127446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127446 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108425.058:15234): pid=127446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_START msg=audit(1770108425.066:15235): pid=127509 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108425.067:15236): pid=127512 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127512 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108425.068:15237): pid=127512 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108425.112:15238): pid=127509 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108425.112:15239): pid=127509 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108425.114:15240): pid=127509 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127521 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108425.180:15241): pid=127521 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108425.181:15242): pid=127521 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F686F72697A6F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108425.182:15243): pid=127521 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108425.188:15244): pid=127521 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108425.202:15245): pid=127521 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108425.203:15246): pid=127521 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108425.205:15247): pid=127509 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127512 suid=0 rport=59356 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108425.206:15248): pid=127509 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127512 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108425.209:15249): pid=127509 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108425.209:15250): pid=127509 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108425.210:15251): pid=127509 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108425.210:15252): pid=127509 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108425.210:15253): pid=127509 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108429.720:15254): pid=127774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108429.722:15255): pid=127773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=127774 suid=74 rport=60790 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108429.723:15256): pid=127773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=127774 suid=74 rport=60790 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108429.798:15257): pid=127773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108429.798:15258): pid=127773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108429.817:15259): pid=127773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108429.818:15260): pid=127773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127774 suid=74 rport=60790 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108429.820:15261): pid=127773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108429.820:15262): pid=127773 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=41 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108429.820:15262): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdd472e490 a2=1 a3=0 items=0 ppid=40636 pid=127773 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=41 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108429.820:15262): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108429.821:15263): pid=127773 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108429.849:15264): pid=127773 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108429.850:15265): pid=127776 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108429.851:15266): pid=127776 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108429.893:15267): pid=127773 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108429.893:15268): pid=127773 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108429.895:15269): pid=127773 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108429.952:15270): pid=127777 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108429.952:15271): pid=127777 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6B657973746F6E652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108429.953:15272): pid=127777 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108429.956:15273): pid=127777 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108429.967:15274): pid=127777 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108429.967:15275): pid=127777 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108429.970:15276): pid=127773 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127776 suid=0 rport=60790 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108429.970:15277): pid=127773 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108429.972:15278): pid=127773 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108429.972:15279): pid=127773 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108429.973:15280): pid=127773 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108429.973:15281): pid=127773 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108429.973:15282): pid=127773 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108430.617:15283): pid=127851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127851 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108430.618:15284): pid=127849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=127851 suid=74 rport=60796 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108430.619:15285): pid=127849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=127851 suid=74 rport=60796 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108430.704:15286): pid=127849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108430.704:15287): pid=127849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108430.730:15288): pid=127849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108430.731:15289): pid=127849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127851 suid=74 rport=60796 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108430.732:15290): pid=127849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108430.732:15291): pid=127849 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=42 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108430.732:15291): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffeff3572d0 a2=1 a3=0 items=0 ppid=40636 pid=127849 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=42 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108430.732:15291): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108430.734:15292): pid=127849 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108430.768:15293): pid=127849 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108430.769:15294): pid=127868 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108430.770:15295): pid=127868 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108430.813:15296): pid=127849 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108430.813:15297): pid=127849 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108430.816:15298): pid=127849 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127869 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108430.876:15299): pid=127869 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108430.877:15300): pid=127869 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F626172626963616E5F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108430.877:15301): pid=127869 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108430.881:15302): pid=127869 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108430.893:15303): pid=127869 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108430.893:15304): pid=127869 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108430.895:15305): pid=127849 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127868 suid=0 rport=60796 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108430.895:15306): pid=127849 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108430.898:15307): pid=127849 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108430.898:15308): pid=127849 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108430.899:15309): pid=127849 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108430.899:15310): pid=127849 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108430.899:15311): pid=127849 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108431.537:15312): pid=127961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108431.538:15313): pid=127952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=127961 suid=74 rport=60804 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108431.538:15314): pid=127952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=127961 suid=74 rport=60804 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108431.608:15315): pid=127952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108431.608:15316): pid=127952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108431.628:15317): pid=127952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108431.628:15318): pid=127952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127961 suid=74 rport=60804 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108431.630:15319): pid=127952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108431.630:15320): pid=127952 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=43 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108431.630:15320): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc706a4f10 a2=1 a3=0 items=0 ppid=40636 pid=127952 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=43 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108431.630:15320): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108431.632:15321): pid=127952 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108431.662:15322): pid=127952 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108431.663:15323): pid=127996 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108431.663:15324): pid=127996 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108431.705:15325): pid=127952 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108431.705:15326): pid=127952 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108431.706:15327): pid=127952 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127997 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108431.767:15328): pid=127997 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108431.767:15329): pid=127997 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F626172626963616E5F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108431.768:15330): pid=127997 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108431.772:15331): pid=127997 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108431.783:15332): pid=127997 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108431.783:15333): pid=127997 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108431.785:15334): pid=127952 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127996 suid=0 rport=60804 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108431.786:15335): pid=127952 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108431.788:15336): pid=127952 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108431.788:15337): pid=127952 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108431.788:15338): pid=127952 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108431.789:15339): pid=127952 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108431.789:15340): pid=127952 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=127952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108432.470:15341): pid=128031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108432.472:15342): pid=128030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=128031 suid=74 rport=60814 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108432.472:15343): pid=128030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=128031 suid=74 rport=60814 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108432.549:15344): pid=128030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108432.549:15345): pid=128030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108432.567:15346): pid=128030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108432.568:15347): pid=128030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=128031 suid=74 rport=60814 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108432.570:15348): pid=128030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108432.570:15349): pid=128030 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=44 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108432.570:15349): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcd7509d60 a2=1 a3=0 items=0 ppid=40636 pid=128030 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=44 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108432.570:15349): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108432.572:15350): pid=128030 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108432.598:15351): pid=128030 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108432.599:15352): pid=128034 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108432.600:15353): pid=128034 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108432.642:15354): pid=128030 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108432.642:15355): pid=128030 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108432.643:15356): pid=128030 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108432.691:15357): pid=128035 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108432.691:15358): pid=128035 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F626172626963616E5F6B657973746F6E655F6C697374656E65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108432.692:15359): pid=128035 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108432.694:15360): pid=128035 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108432.700:15361): pid=128035 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108432.701:15362): pid=128035 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108432.702:15363): pid=128030 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=128034 suid=0 rport=60814 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108432.702:15364): pid=128030 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108432.705:15365): pid=128030 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108432.705:15366): pid=128030 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108432.706:15367): pid=128030 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108432.706:15368): pid=128030 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108432.706:15369): pid=128030 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108437.050:15370): pid=128220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128220 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108437.052:15371): pid=128219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=128220 suid=74 rport=56474 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108437.052:15372): pid=128219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=128220 suid=74 rport=56474 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108437.120:15373): pid=128219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108437.120:15374): pid=128219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108437.139:15375): pid=128219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108437.140:15376): pid=128219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=128220 suid=74 rport=56474 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108437.142:15377): pid=128219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108437.142:15378): pid=128219 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=45 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108437.142:15378): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd13216560 a2=1 a3=0 items=0 ppid=40636 pid=128219 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=45 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108437.142:15378): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108437.144:15379): pid=128219 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108437.176:15380): pid=128219 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108437.177:15381): pid=128263 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128263 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108437.178:15382): pid=128263 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108437.222:15383): pid=128219 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108437.222:15384): pid=128219 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108437.222:15385): pid=128219 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128264 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108437.282:15386): pid=128264 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108437.283:15387): pid=128264 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F63696E6465725F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108437.284:15388): pid=128264 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108437.287:15389): pid=128264 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108437.300:15390): pid=128264 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108437.300:15391): pid=128264 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108437.303:15392): pid=128219 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108437.303:15393): pid=128219 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108437.303:15394): pid=128219 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=128263 suid=0 rport=56474 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108437.303:15395): pid=128219 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128263 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108437.305:15396): pid=128219 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108437.306:15397): pid=128219 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108437.307:15398): pid=128219 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1770108437.328:15399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108437.425:15400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108437.487:15401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108437.557:15402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108438.140:15403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108438.142:15404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108438.143:15405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108438.145:15406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108438.290:15407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108438.315:15408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108438.394:15409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108438.445:15410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108438.524:15411): pid=128511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128511 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108438.525:15412): pid=128510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=128511 suid=74 rport=56484 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108438.525:15413): pid=128510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=128511 suid=74 rport=56484 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108438.614:15414): pid=128510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108438.614:15415): pid=128510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108438.638:15416): pid=128510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108438.638:15417): pid=128510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=128511 suid=74 rport=56484 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108438.640:15418): pid=128510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108438.641:15419): pid=128510 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=46 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108438.641:15419): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd51c67dc0 a2=1 a3=0 items=0 ppid=40636 pid=128510 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=46 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108438.641:15419): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108438.642:15420): pid=128510 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108438.671:15421): pid=128510 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108438.673:15422): pid=128513 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128513 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108438.674:15423): pid=128513 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108438.718:15424): pid=128510 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108438.718:15425): pid=128510 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108438.721:15426): pid=128510 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108438.777:15427): pid=128514 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108438.777:15428): pid=128514 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F63696E6465725F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108438.778:15429): pid=128514 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108438.781:15430): pid=128514 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108438.794:15431): pid=128514 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108438.794:15432): pid=128514 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108438.796:15433): pid=128510 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=128513 suid=0 rport=56484 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108438.797:15434): pid=128510 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128513 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108438.799:15435): pid=128510 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108438.799:15436): pid=128510 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108438.800:15437): pid=128510 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108438.800:15438): pid=128510 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108438.800:15439): pid=128510 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108440.031:15440): pid=128538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128538 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108440.538:15441): pid=128537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=128538 suid=74 rport=40982 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108440.538:15442): pid=128537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=128538 suid=74 rport=40982 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108441.146:15443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108441.149:15444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108441.152:15445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108441.155:15446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108441.368:15447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108441.400:15448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108441.455:15449): pid=128637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128637 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108441.456:15450): pid=128634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=128637 suid=74 rport=56490 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108441.456:15451): pid=128634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=128637 suid=74 rport=56490 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108441.536:15452): pid=128634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108441.536:15453): pid=128634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108441.552:15454): pid=128634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108441.552:15455): pid=128634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=128637 suid=74 rport=56490 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108441.554:15456): pid=128634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108441.554:15457): pid=128634 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=47 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108441.554:15457): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd6208bf00 a2=1 a3=0 items=0 ppid=40636 pid=128634 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=47 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108441.554:15457): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108441.556:15458): pid=128634 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108441.585:15459): pid=128634 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108441.586:15460): pid=128650 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108441.587:15461): pid=128650 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108441.629:15462): pid=128634 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108441.629:15463): pid=128634 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108441.631:15464): pid=128634 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128651 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108441.665:15465): pid=128651 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108441.665:15466): pid=128651 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F63696E6465725F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1770108441.666:15467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1770108441.666:15468): pid=128651 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108441.669:15469): pid=128651 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108441.679:15470): pid=128651 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108441.679:15471): pid=128651 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108441.682:15472): pid=128634 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=128650 suid=0 rport=56490 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108441.682:15473): pid=128634 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108441.684:15474): pid=128634 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108441.685:15475): pid=128634 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108441.685:15476): pid=128634 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108441.685:15477): pid=128634 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108441.685:15478): pid=128634 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128634 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1770108441.718:15479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108441.967:15480): pid=128537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=128538 suid=74 rport=40982 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108441.967:15481): pid=128537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128538 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108441.967:15482): pid=128537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108441.968:15483): pid=128537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108441.968:15484): pid=128537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108442.157:15485): pid=128669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108442.358:15486): pid=128671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108442.369:15487): pid=128670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=128671 suid=74 rport=56498 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108442.369:15488): pid=128670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=128671 suid=74 rport=56498 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108442.428:15489): pid=128668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=128669 suid=74 rport=40988 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108442.428:15490): pid=128668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=128669 suid=74 rport=40988 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108442.490:15491): pid=128670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108442.490:15492): pid=128670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108442.517:15493): pid=128670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108442.518:15494): pid=128670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=128671 suid=74 rport=56498 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108442.521:15495): pid=128670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108442.521:15496): pid=128670 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=48 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108442.521:15496): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff53fe6a70 a2=1 a3=0 items=0 ppid=40636 pid=128670 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=48 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108442.521:15496): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108442.523:15497): pid=128670 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108442.567:15498): pid=128670 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108442.568:15499): pid=128681 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128681 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108442.569:15500): pid=128681 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108442.612:15501): pid=128670 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108442.612:15502): pid=128670 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108442.615:15503): pid=128670 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128682 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108442.673:15504): pid=128682 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108442.673:15505): pid=128682 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F63696E6465725F766F6C756D652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108442.674:15506): pid=128682 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108442.678:15507): pid=128682 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108442.689:15508): pid=128682 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108442.690:15509): pid=128682 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108442.692:15510): pid=128670 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=128681 suid=0 rport=56498 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108442.693:15511): pid=128670 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128681 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108442.695:15512): pid=128670 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108442.696:15513): pid=128670 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108442.696:15514): pid=128670 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108442.696:15515): pid=128670 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108442.696:15516): pid=128670 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108443.303:15517): pid=128749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108443.307:15518): pid=128748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=128749 suid=74 rport=56504 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108443.307:15519): pid=128748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=128749 suid=74 rport=56504 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108443.427:15520): pid=128748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108443.427:15521): pid=128748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108443.447:15522): pid=128748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108443.448:15523): pid=128748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=128749 suid=74 rport=56504 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108443.450:15524): pid=128748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108443.450:15525): pid=128748 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=49 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108443.450:15525): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe22bab650 a2=1 a3=0 items=0 ppid=40636 pid=128748 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=49 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108443.450:15525): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108443.451:15526): pid=128748 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108443.472:15527): pid=128748 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108443.473:15528): pid=128752 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108443.473:15529): pid=128752 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108443.515:15530): pid=128748 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108443.515:15531): pid=128748 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108443.516:15532): pid=128748 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128756 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108443.554:15533): pid=128756 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108443.555:15534): pid=128756 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F63696E6465725F6261636B75702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108443.556:15535): pid=128756 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108443.558:15536): pid=128756 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108443.565:15537): pid=128756 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108443.566:15538): pid=128756 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108443.568:15539): pid=128748 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=128752 suid=0 rport=56504 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108443.568:15540): pid=128748 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108443.570:15541): pid=128748 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108443.571:15542): pid=128748 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108443.571:15543): pid=128748 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108443.571:15544): pid=128748 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108443.571:15545): pid=128748 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108443.760:15546): pid=128668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=128669 suid=74 rport=40988 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108443.760:15547): pid=128668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128669 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108443.761:15548): pid=128668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108443.762:15549): pid=128668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=128668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108443.762:15550): pid=128668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108447.150:15551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108447.260:15552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108447.263:15553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108447.309:15554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108447.489:15555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108447.581:15556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108451.141:15557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108451.274:15558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1770108453.642:15559): pid=125637 uid=0 auid=0 ses=20 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1770108453.643:15560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108453.673:15561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108456.270:15562): pid=129520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=129520 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108456.543:15563): pid=129519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=129520 suid=74 rport=50228 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108456.543:15564): pid=129519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=129520 suid=74 rport=50228 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108458.749:15565): pid=129519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=129520 suid=74 rport=50228 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108458.750:15566): pid=129519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=129520 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108458.751:15567): pid=129519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108458.751:15568): pid=129519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=129519 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108458.751:15569): pid=129519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108468.143:15570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108468.146:15571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108468.321:15572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108468.326:15573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108468.346:15574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108468.360:15575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=943d17f76741e851b941a94b85cff33a86aca9c5dae588f99cb3f522d47542a5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108468.438:15576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108468.480:15577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108468.521:15578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108468.642:15579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108468.673:15580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108468.696:15581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108472.141:15582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108472.144:15583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108472.148:15584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108472.151:15585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108472.409:15586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108472.464:15587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108472.671:15588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108472.766:15589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108478.148:15590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108478.152:15591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108478.155:15592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108478.423:15593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108478.538:15594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108478.574:15595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108481.186:15596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108481.186:15597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108482.143:15598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108482.305:15599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108487.626:15600): pid=131610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131610 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108487.627:15601): pid=131609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=131610 suid=74 rport=56884 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108487.627:15602): pid=131609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=131610 suid=74 rport=56884 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108487.703:15603): pid=131609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108487.703:15604): pid=131609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108487.733:15605): pid=131609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108487.734:15606): pid=131609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=131610 suid=74 rport=56884 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108487.737:15607): pid=131609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108487.737:15608): pid=131609 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=50 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108487.737:15608): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff20beec10 a2=1 a3=0 items=0 ppid=40636 pid=131609 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=50 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108487.737:15608): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108487.739:15609): pid=131609 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108487.785:15610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108487.825:15611): pid=131621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1770108487.825:15612): pid=131621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1770108487.826:15613): pid=131621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108487.826:15614): pid=131621 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=51 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108487.826:15614): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd711b5940 a2=1 a3=0 items=0 ppid=1 pid=131621 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=51 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108487.826:15614): proctitle="(systemd)" type=USER_START msg=audit(1770108487.829:15615): pid=131621 uid=0 auid=0 ses=51 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1770108487.851:15616): prog-id=1022 op=LOAD type=SYSCALL msg=audit(1770108487.851:15616): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc3464e6c0 a2=90 a3=0 items=0 ppid=1 pid=131621 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=51 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108487.851:15616): proctitle="(systemd)" type=BPF msg=audit(1770108487.852:15617): prog-id=0 op=UNLOAD type=BPF msg=audit(1770108487.852:15618): prog-id=1023 op=LOAD type=SYSCALL msg=audit(1770108487.852:15618): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc3464e760 a2=90 a3=4 items=0 ppid=1 pid=131621 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=51 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108487.852:15618): proctitle="(systemd)" type=BPF msg=audit(1770108487.852:15619): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770108488.001:15620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770108488.021:15621): pid=131609 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108488.022:15622): pid=131637 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131637 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108488.023:15623): pid=131637 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108488.068:15624): pid=131609 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108488.068:15625): pid=131609 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108488.070:15626): pid=131609 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108488.134:15627): pid=131645 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108488.134:15628): pid=131645 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F636F6C6C656374642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108488.135:15629): pid=131645 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108488.139:15630): pid=131645 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108488.155:15631): pid=131645 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108488.155:15632): pid=131645 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108488.159:15633): pid=131609 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=131637 suid=0 rport=56884 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108488.159:15634): pid=131609 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131637 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108488.162:15635): pid=131609 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108488.162:15636): pid=131609 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108488.163:15637): pid=131609 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108488.163:15638): pid=131609 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108488.163:15639): pid=131609 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131609 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108488.187:15640): pid=131736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108488.188:15641): pid=131735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=131736 suid=74 rport=56900 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108488.188:15642): pid=131735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=131736 suid=74 rport=56900 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108488.261:15643): pid=131735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108488.261:15644): pid=131735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108488.290:15645): pid=131735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108488.290:15646): pid=131735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=131736 suid=74 rport=56900 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108488.292:15647): pid=131735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108488.293:15648): pid=131735 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=52 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108488.293:15648): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff10466280 a2=1 a3=0 items=0 ppid=40636 pid=131735 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=52 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108488.293:15648): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108488.295:15649): pid=131735 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108488.329:15650): pid=131735 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108488.330:15651): pid=131738 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108488.331:15652): pid=131738 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108488.373:15653): pid=131735 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108488.373:15654): pid=131735 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108488.375:15655): pid=131735 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108488.425:15656): pid=131739 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108488.426:15657): pid=131739 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F636F6C6C656374642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108488.427:15658): pid=131739 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108488.432:15659): pid=131739 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1770108491.172:15660): prog-id=0 op=UNLOAD type=CRYPTO_KEY_USER msg=audit(1770108491.352:15661): pid=131824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131824 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770108491.379:15662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_collectd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770108491.387:15663): pid=131739 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108491.387:15664): pid=131739 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108491.393:15665): pid=131735 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=131738 suid=0 rport=56900 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108491.393:15666): pid=131735 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108491.396:15667): pid=131735 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108491.396:15668): pid=131735 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108491.397:15669): pid=131735 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108491.397:15670): pid=131735 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108491.397:15671): pid=131735 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_SESSION msg=audit(1770108491.509:15672): pid=131809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=131824 suid=74 rport=35620 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108491.509:15673): pid=131809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=131824 suid=74 rport=35620 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108492.566:15674): pid=131835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131835 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108492.835:15675): pid=131834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=131835 suid=74 rport=35626 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108492.835:15676): pid=131834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=131835 suid=74 rport=35626 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108492.937:15677): pid=131845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131845 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108492.938:15678): pid=131843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=131845 suid=74 rport=56906 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108492.938:15679): pid=131843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=131845 suid=74 rport=56906 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108493.023:15680): pid=131843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108493.023:15681): pid=131843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108493.053:15682): pid=131843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108493.054:15683): pid=131843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=131845 suid=74 rport=56906 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108493.057:15684): pid=131843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108493.058:15685): pid=131843 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=53 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108493.058:15685): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe50c6d950 a2=1 a3=0 items=0 ppid=40636 pid=131843 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=53 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108493.058:15685): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108493.060:15686): pid=131843 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108493.091:15687): pid=131843 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108493.093:15688): pid=131849 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108493.094:15689): pid=131849 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108493.138:15690): pid=131843 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108493.138:15691): pid=131843 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108493.141:15692): pid=131843 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131850 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108493.214:15693): pid=131850 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108493.215:15694): pid=131850 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F676C616E63655F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108493.215:15695): pid=131850 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108493.221:15696): pid=131850 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108493.236:15697): pid=131850 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108493.237:15698): pid=131850 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108493.240:15699): pid=131843 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=131849 suid=0 rport=56906 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108493.240:15700): pid=131843 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108493.243:15701): pid=131843 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108493.243:15702): pid=131843 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108493.244:15703): pid=131843 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108493.244:15704): pid=131843 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108493.244:15705): pid=131843 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131843 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108493.852:15706): pid=131866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131866 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108493.853:15707): pid=131865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=131866 suid=74 rport=56918 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108493.854:15708): pid=131865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=131866 suid=74 rport=56918 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108493.928:15709): pid=131865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108493.928:15710): pid=131865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108493.955:15711): pid=131865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108493.955:15712): pid=131865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=131866 suid=74 rport=56918 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108493.958:15713): pid=131865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108493.958:15714): pid=131865 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=54 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108493.958:15714): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff16ff51b0 a2=1 a3=0 items=0 ppid=40636 pid=131865 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=54 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108493.958:15714): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108493.960:15715): pid=131865 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108494.001:15716): pid=131865 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108494.002:15717): pid=131876 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131876 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108494.003:15718): pid=131876 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108494.046:15719): pid=131865 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108494.046:15720): pid=131865 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108494.048:15721): pid=131865 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131877 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108494.113:15722): pid=131877 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108494.113:15723): pid=131877 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F676E6F636368695F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108494.116:15724): pid=131877 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108494.119:15725): pid=131877 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108494.136:15726): pid=131877 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108494.137:15727): pid=131877 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108494.140:15728): pid=131865 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=131876 suid=0 rport=56918 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108494.142:15729): pid=131865 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131876 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108494.144:15730): pid=131865 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108494.144:15731): pid=131865 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108494.145:15732): pid=131865 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108494.145:15733): pid=131865 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108494.145:15734): pid=131865 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108494.735:15735): pid=131942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108494.735:15736): pid=131941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=131942 suid=74 rport=56932 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108494.735:15737): pid=131941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=131942 suid=74 rport=56932 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108494.804:15738): pid=131941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108494.804:15739): pid=131941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108494.820:15740): pid=131941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108494.820:15741): pid=131941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=131942 suid=74 rport=56932 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108494.822:15742): pid=131941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108494.822:15743): pid=131941 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=55 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108494.822:15743): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff4052e280 a2=1 a3=0 items=0 ppid=40636 pid=131941 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=55 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108494.822:15743): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108494.823:15744): pid=131941 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108494.853:15745): pid=131941 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108494.854:15746): pid=131944 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131944 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108494.855:15747): pid=131944 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108494.898:15748): pid=131941 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108494.898:15749): pid=131941 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108494.901:15750): pid=131941 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108494.959:15751): pid=131945 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108494.959:15752): pid=131945 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F676E6F636368695F6D6574726963642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108494.960:15753): pid=131945 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108494.963:15754): pid=131945 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108494.971:15755): pid=131945 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108494.971:15756): pid=131945 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108494.974:15757): pid=131941 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=131944 suid=0 rport=56932 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108494.974:15758): pid=131941 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131944 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108494.977:15759): pid=131941 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108494.978:15760): pid=131941 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108494.978:15761): pid=131941 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108494.978:15762): pid=131941 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108494.979:15763): pid=131941 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108495.506:15764): pid=131834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=131835 suid=74 rport=35626 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108495.506:15765): pid=131834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131835 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108495.508:15766): pid=131834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108495.508:15767): pid=131834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131834 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108495.509:15768): pid=131834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108495.582:15769): pid=132083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=132083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108495.583:15770): pid=132082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=132083 suid=74 rport=39280 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108495.583:15771): pid=132082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=132083 suid=74 rport=39280 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108495.653:15772): pid=132082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108495.653:15773): pid=132082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108495.680:15774): pid=132082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108495.681:15775): pid=132082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=132083 suid=74 rport=39280 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108495.683:15776): pid=132082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108495.683:15777): pid=132082 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=56 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108495.683:15777): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffad873210 a2=1 a3=0 items=0 ppid=40636 pid=132082 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=56 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108495.683:15777): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108495.684:15778): pid=132082 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108495.722:15779): pid=132082 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108495.723:15780): pid=132085 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=132085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108495.724:15781): pid=132085 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108495.767:15782): pid=132082 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108495.767:15783): pid=132082 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108495.769:15784): pid=132082 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=132086 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108495.834:15785): pid=132086 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108495.834:15786): pid=132086 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F676E6F636368695F7374617473642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108495.836:15787): pid=132086 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108495.841:15788): pid=132086 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108495.856:15789): pid=132086 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108495.857:15790): pid=132086 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108495.860:15791): pid=132082 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=132085 suid=0 rport=39280 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108495.860:15792): pid=132082 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=132085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108495.863:15793): pid=132082 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108495.863:15794): pid=132082 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108495.864:15795): pid=132082 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108495.864:15796): pid=132082 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108495.865:15797): pid=132082 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=132082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108496.341:15798): pid=131809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=131824 suid=74 rport=35620 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108496.341:15799): pid=131809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131824 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108496.342:15800): pid=131809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108496.343:15801): pid=131809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=131809 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108496.343:15802): pid=131809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108499.149:15803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108499.155:15804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108499.158:15805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108499.162:15806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108499.165:15807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108499.395:15808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108499.436:15809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108499.495:15810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108499.503:15811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108499.584:15812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108500.162:15813): pid=132526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=132526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108500.164:15814): pid=132525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=132526 suid=74 rport=39282 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108500.164:15815): pid=132525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=132526 suid=74 rport=39282 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108500.234:15816): pid=132525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108500.234:15817): pid=132525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108500.263:15818): pid=132525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108500.263:15819): pid=132525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=132526 suid=74 rport=39282 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108500.266:15820): pid=132525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108500.266:15821): pid=132525 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=57 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108500.266:15821): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffedac580d0 a2=1 a3=0 items=0 ppid=40636 pid=132525 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=57 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108500.266:15821): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108500.268:15822): pid=132525 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108500.300:15823): pid=132525 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108500.301:15824): pid=132528 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=132528 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108500.302:15825): pid=132528 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108500.346:15826): pid=132525 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108500.346:15827): pid=132525 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108500.351:15828): pid=132525 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=132529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108500.414:15829): pid=132529 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108500.415:15830): pid=132529 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6D616E696C615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108500.416:15831): pid=132529 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108500.422:15832): pid=132529 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108500.436:15833): pid=132529 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108500.436:15834): pid=132529 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108500.439:15835): pid=132525 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=132528 suid=0 rport=39282 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108500.439:15836): pid=132525 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=132528 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108500.443:15837): pid=132525 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108500.443:15838): pid=132525 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108500.443:15839): pid=132525 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108500.443:15840): pid=132525 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108500.443:15841): pid=132525 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=132525 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108501.652:15842): pid=132553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=132553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108501.653:15843): pid=132552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=132553 suid=74 rport=39284 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108501.653:15844): pid=132552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=132553 suid=74 rport=39284 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108501.729:15845): pid=132552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108501.729:15846): pid=132552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108501.749:15847): pid=132552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108501.750:15848): pid=132552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=132553 suid=74 rport=39284 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108501.752:15849): pid=132552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108501.753:15850): pid=132552 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=58 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108501.753:15850): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdc3ebd300 a2=1 a3=0 items=0 ppid=40636 pid=132552 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=58 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108501.753:15850): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108501.754:15851): pid=132552 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108501.782:15852): pid=132552 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108501.784:15853): pid=132555 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=132555 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108501.785:15854): pid=132555 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108501.827:15855): pid=132552 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108501.827:15856): pid=132552 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108501.829:15857): pid=132552 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=132556 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108501.883:15858): pid=132556 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108501.883:15859): pid=132556 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6D616E696C615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108501.884:15860): pid=132556 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108501.888:15861): pid=132556 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108501.906:15862): pid=132556 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108501.906:15863): pid=132556 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108501.909:15864): pid=132552 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=132555 suid=0 rport=39284 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108501.910:15865): pid=132552 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=132555 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108501.912:15866): pid=132552 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108501.912:15867): pid=132552 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108501.913:15868): pid=132552 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108501.913:15869): pid=132552 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108501.913:15870): pid=132552 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=132552 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1770108503.141:15871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108503.147:15872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108503.151:15873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108503.155:15874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108503.346:15875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108503.473:15876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108503.645:15877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108503.761:15878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108508.519:15879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108508.633:15880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108508.635:15881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108508.759:15882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108508.811:15883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108509.128:15884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1770108512.145:15885): pid=131623 uid=0 auid=0 ses=51 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1770108512.146:15886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108512.181:15887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108513.140:15888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108513.307:15889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108518.972:15890): pid=133660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=133660 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108519.274:15891): pid=133659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=133660 suid=74 rport=45836 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108519.274:15892): pid=133659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=133660 suid=74 rport=45836 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108519.501:15893): pid=133676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=133676 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108519.708:15894): pid=133658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=133676 suid=74 rport=44306 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108519.709:15895): pid=133658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=133676 suid=74 rport=44306 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108523.021:15896): pid=133659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=133660 suid=74 rport=45836 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108523.022:15897): pid=133659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=133660 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108523.022:15898): pid=133659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108523.023:15899): pid=133659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=133659 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108523.023:15900): pid=133659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108526.399:15901): pid=134053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134053 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108526.400:15902): pid=134052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=134053 suid=74 rport=38580 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108526.400:15903): pid=134052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=134053 suid=74 rport=38580 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108526.472:15904): pid=134052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108526.472:15905): pid=134052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108526.503:15906): pid=134052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108526.504:15907): pid=134052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=134053 suid=74 rport=38580 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108526.507:15908): pid=134052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108526.507:15909): pid=134052 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=59 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108526.507:15909): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffedb653e80 a2=1 a3=0 items=0 ppid=40636 pid=134052 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=59 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108526.507:15909): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108526.509:15910): pid=134052 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108526.573:15911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108526.622:15912): pid=134056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1770108526.622:15913): pid=134056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1770108526.623:15914): pid=134056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108526.624:15915): pid=134056 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=60 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108526.624:15915): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd711b5940 a2=1 a3=0 items=0 ppid=1 pid=134056 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=60 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108526.624:15915): proctitle="(systemd)" type=USER_START msg=audit(1770108526.627:15916): pid=134056 uid=0 auid=0 ses=60 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1770108526.651:15917): prog-id=1024 op=LOAD type=SYSCALL msg=audit(1770108526.651:15917): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffee6a0a190 a2=90 a3=0 items=0 ppid=1 pid=134056 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=60 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108526.651:15917): proctitle="(systemd)" type=BPF msg=audit(1770108526.652:15918): prog-id=0 op=UNLOAD type=BPF msg=audit(1770108526.652:15919): prog-id=1025 op=LOAD type=SYSCALL msg=audit(1770108526.652:15919): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffee6a0a230 a2=90 a3=4 items=0 ppid=1 pid=134056 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=60 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108526.652:15919): proctitle="(systemd)" type=BPF msg=audit(1770108526.652:15920): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770108526.806:15921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770108526.831:15922): pid=134052 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108526.833:15923): pid=134072 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108526.834:15924): pid=134072 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108526.879:15925): pid=134052 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108526.879:15926): pid=134052 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108526.881:15927): pid=134052 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134081 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108526.941:15928): pid=134081 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108526.942:15929): pid=134081 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6D616E696C615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108526.943:15930): pid=134081 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108526.947:15931): pid=134081 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108526.963:15932): pid=134081 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108526.964:15933): pid=134081 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108526.966:15934): pid=134052 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108526.966:15935): pid=134052 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108526.967:15936): pid=134052 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=134072 suid=0 rport=38580 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108526.967:15937): pid=134052 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108526.971:15938): pid=134052 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108526.971:15939): pid=134052 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108526.972:15940): pid=134052 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134052 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1770108530.145:15941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108530.150:15942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108530.154:15943): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108530.157:15944): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108530.161:15945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108530.318:15946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108530.434:15947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108530.456:15948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108530.559:15949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108530.576:15950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108531.733:15951): pid=133658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=133676 suid=74 rport=44306 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108531.735:15952): pid=133658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=133676 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108531.736:15953): pid=133658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108531.736:15954): pid=133658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=133658 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108531.736:15955): pid=133658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="bin" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108531.766:15956): pid=134450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108531.767:15957): pid=134449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=134450 suid=74 rport=38588 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108531.767:15958): pid=134449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=134450 suid=74 rport=38588 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108531.839:15959): pid=134449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108531.839:15960): pid=134449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108531.870:15961): pid=134449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108531.870:15962): pid=134449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=134450 suid=74 rport=38588 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108531.873:15963): pid=134449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108531.873:15964): pid=134449 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=61 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108531.873:15964): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffead867f70 a2=1 a3=0 items=0 ppid=40636 pid=134449 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=61 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108531.873:15964): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108531.875:15965): pid=134449 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108531.907:15966): pid=134449 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108531.909:15967): pid=134452 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108531.910:15968): pid=134452 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108531.955:15969): pid=134449 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108531.955:15970): pid=134449 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108531.959:15971): pid=134449 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134453 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108532.024:15972): pid=134453 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108532.025:15973): pid=134453 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E657574726F6E5F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108532.026:15974): pid=134453 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108532.031:15975): pid=134453 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108532.047:15976): pid=134453 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108532.048:15977): pid=134453 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108532.051:15978): pid=134449 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=134452 suid=0 rport=38588 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108532.051:15979): pid=134449 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108532.054:15980): pid=134449 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108532.054:15981): pid=134449 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108532.055:15982): pid=134449 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108532.055:15983): pid=134449 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108532.055:15984): pid=134449 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1770108534.143:15985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108534.147:15986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108534.150:15987): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108534.154:15988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108534.363:15989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108534.435:15990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108534.585:15991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108534.741:15992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108536.388:15993): pid=134837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134837 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108536.390:15994): pid=134835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=134837 suid=74 rport=44304 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108536.390:15995): pid=134835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=134837 suid=74 rport=44304 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108536.461:15996): pid=134835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108536.461:15997): pid=134835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108536.488:15998): pid=134835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108536.489:15999): pid=134835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=134837 suid=74 rport=44304 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108536.491:16000): pid=134835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108536.491:16001): pid=134835 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=62 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108536.491:16001): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc8e2e16c0 a2=1 a3=0 items=0 ppid=40636 pid=134835 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=62 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108536.491:16001): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108536.493:16002): pid=134835 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108536.533:16003): pid=134835 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108536.535:16004): pid=134839 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134839 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108536.536:16005): pid=134839 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108536.580:16006): pid=134835 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108536.580:16007): pid=134835 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108536.583:16008): pid=134835 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134840 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108536.648:16009): pid=134840 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108536.649:16010): pid=134840 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F706C6163656D656E745F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108536.650:16011): pid=134840 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108536.655:16012): pid=134840 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108536.671:16013): pid=134840 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108536.671:16014): pid=134840 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108536.674:16015): pid=134835 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=134839 suid=0 rport=44304 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108536.674:16016): pid=134835 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134839 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108536.677:16017): pid=134835 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108536.677:16018): pid=134835 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108536.678:16019): pid=134835 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108536.678:16020): pid=134835 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108536.678:16021): pid=134835 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134835 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108537.913:16022): pid=134988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134988 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108537.915:16023): pid=134978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=134988 suid=74 rport=44306 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108537.915:16024): pid=134978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=134988 suid=74 rport=44306 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108537.996:16025): pid=134978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108537.996:16026): pid=134978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108538.011:16027): pid=134978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108538.011:16028): pid=134978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=134988 suid=74 rport=44306 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108538.014:16029): pid=134978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108538.014:16030): pid=134978 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=63 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108538.014:16030): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffec6520170 a2=1 a3=0 items=0 ppid=40636 pid=134978 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=63 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108538.014:16030): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108538.015:16031): pid=134978 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108538.046:16032): pid=134978 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108538.047:16033): pid=134990 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134990 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108538.047:16034): pid=134990 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108538.090:16035): pid=134978 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108538.090:16036): pid=134978 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108538.092:16037): pid=134978 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134991 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108538.150:16038): pid=134991 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108538.151:16039): pid=134991 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108538.153:16040): pid=134991 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108538.157:16041): pid=134991 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108538.169:16042): pid=134991 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108538.169:16043): pid=134991 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108538.171:16044): pid=134978 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=134990 suid=0 rport=44306 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108538.172:16045): pid=134978 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134990 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108538.173:16046): pid=134978 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108538.173:16047): pid=134978 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108538.174:16048): pid=134978 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108538.174:16049): pid=134978 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108538.174:16050): pid=134978 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=134978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1770108539.142:16051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108539.145:16052): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108539.148:16053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108539.386:16054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108539.443:16055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108539.519:16056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108542.564:16057): pid=135208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=135208 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108542.566:16058): pid=135207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=135208 suid=74 rport=44310 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108542.566:16059): pid=135207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=135208 suid=74 rport=44310 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108542.639:16060): pid=135207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108542.639:16061): pid=135207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108542.665:16062): pid=135207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108542.666:16063): pid=135207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=135208 suid=74 rport=44310 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108542.668:16064): pid=135207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108542.668:16065): pid=135207 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=64 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108542.668:16065): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc025741e0 a2=1 a3=0 items=0 ppid=40636 pid=135207 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=64 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108542.668:16065): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108542.670:16066): pid=135207 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108542.703:16067): pid=135207 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108542.705:16068): pid=135210 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=135210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108542.706:16069): pid=135210 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108542.751:16070): pid=135207 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108542.751:16071): pid=135207 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108542.754:16072): pid=135207 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=135211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108542.819:16073): pid=135211 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108542.819:16074): pid=135211 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108542.820:16075): pid=135211 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108542.825:16076): pid=135211 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108542.839:16077): pid=135211 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108542.840:16078): pid=135211 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108542.842:16079): pid=135207 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=135210 suid=0 rport=44310 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108542.843:16080): pid=135207 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=135210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108542.845:16081): pid=135207 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108542.846:16082): pid=135207 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108542.847:16083): pid=135207 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108542.847:16084): pid=135207 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108542.847:16085): pid=135207 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=135207 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1770108544.141:16086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108544.321:16087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108551.652:16088): pid=135768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=135768 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108551.982:16089): pid=135767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=135768 suid=74 rport=56824 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108551.983:16090): pid=135767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=135768 suid=74 rport=56824 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_DISP msg=audit(1770108552.894:16091): pid=134058 uid=0 auid=0 ses=60 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1770108552.895:16092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108552.924:16093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108553.891:16094): pid=135767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=135768 suid=74 rport=56824 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108553.892:16095): pid=135767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=135768 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108553.893:16096): pid=135767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108553.893:16097): pid=135767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=135767 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108553.893:16098): pid=135767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108561.145:16099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108561.149:16100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108561.152:16101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108561.155:16102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108561.159:16103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108561.383:16104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108561.399:16105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108561.469:16106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=083db4a882e7f09c2cd79b1d3cf654cdf6c936a4996cf0e708009dc9d0fdfec1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108561.483:16107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108561.502:16108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108565.142:16109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108565.145:16110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108565.148:16111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108565.151:16112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108565.417:16113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108565.501:16114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108565.621:16115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108565.654:16116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108567.993:16117): pid=136679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=136679 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108568.254:16118): pid=136678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=136679 suid=74 rport=47916 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108568.254:16119): pid=136678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=136679 suid=74 rport=47916 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108568.508:16120): pid=136730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=136730 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108568.510:16121): pid=136729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=136730 suid=74 rport=56804 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108568.510:16122): pid=136729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=136730 suid=74 rport=56804 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108568.585:16123): pid=136729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108568.585:16124): pid=136729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108568.614:16125): pid=136729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108568.615:16126): pid=136729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=136730 suid=74 rport=56804 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108568.617:16127): pid=136729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108568.617:16128): pid=136729 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=65 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108568.617:16128): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffce8733410 a2=1 a3=0 items=0 ppid=40636 pid=136729 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108568.617:16128): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108568.619:16129): pid=136729 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108568.668:16130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108568.705:16131): pid=136792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1770108568.705:16132): pid=136792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1770108568.706:16133): pid=136792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108568.707:16134): pid=136792 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=66 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108568.707:16134): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd711b5940 a2=1 a3=0 items=0 ppid=1 pid=136792 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=66 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108568.707:16134): proctitle="(systemd)" type=USER_START msg=audit(1770108568.710:16135): pid=136792 uid=0 auid=0 ses=66 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1770108568.729:16136): prog-id=1026 op=LOAD type=SYSCALL msg=audit(1770108568.729:16136): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffeb2c007d0 a2=90 a3=0 items=0 ppid=1 pid=136792 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=66 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108568.729:16136): proctitle="(systemd)" type=BPF msg=audit(1770108568.730:16137): prog-id=0 op=UNLOAD type=BPF msg=audit(1770108568.730:16138): prog-id=1027 op=LOAD type=SYSCALL msg=audit(1770108568.730:16138): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffeb2c00870 a2=90 a3=4 items=0 ppid=1 pid=136792 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=66 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108568.730:16138): proctitle="(systemd)" type=BPF msg=audit(1770108568.730:16139): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770108568.887:16140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770108568.911:16141): pid=136729 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108568.912:16142): pid=136830 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=136830 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108568.913:16143): pid=136830 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108568.958:16144): pid=136729 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108568.958:16145): pid=136729 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108568.960:16146): pid=136729 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=136831 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108569.011:16147): pid=136831 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108569.011:16148): pid=136831 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108569.012:16149): pid=136831 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108569.017:16150): pid=136831 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108569.027:16151): pid=136831 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108569.028:16152): pid=136831 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108569.030:16153): pid=136729 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=136830 suid=0 rport=56804 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108569.031:16154): pid=136729 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=136830 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108569.033:16155): pid=136729 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108569.034:16156): pid=136729 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108569.034:16157): pid=136729 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108569.034:16158): pid=136729 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108569.034:16159): pid=136729 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=136729 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108569.056:16160): pid=136847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=136847 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108569.057:16161): pid=136846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=136847 suid=74 rport=56810 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108569.057:16162): pid=136846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=136847 suid=74 rport=56810 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108569.130:16163): pid=136846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108569.130:16164): pid=136846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108569.157:16165): pid=136846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108569.157:16166): pid=136846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=136847 suid=74 rport=56810 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108569.159:16167): pid=136846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108569.160:16168): pid=136846 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=67 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108569.160:16168): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe5bdd9390 a2=1 a3=0 items=0 ppid=40636 pid=136846 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=67 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108569.160:16168): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108569.161:16169): pid=136846 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108569.192:16170): pid=136846 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108569.193:16171): pid=136849 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=136849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108569.194:16172): pid=136849 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108569.237:16173): pid=136846 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108569.237:16174): pid=136846 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108569.240:16175): pid=136846 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=136850 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108569.299:16176): pid=136850 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108569.300:16177): pid=136850 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6E6F76615F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108569.301:16178): pid=136850 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108569.304:16179): pid=136850 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108569.430:16180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108569.432:16181): pid=136678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=136679 suid=74 rport=47916 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108569.433:16182): pid=136678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=136679 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108569.434:16183): pid=136678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108569.434:16184): pid=136678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=136678 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108569.434:16185): pid=136678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108569.546:16186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108569.551:16187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108569.587:16188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108569.723:16189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=62d8fa37813059ef1fd1239e840afca0348e229cc6dc9042ffa91663280edbb8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108569.934:16190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1770108571.071:16191): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1770108571.274:16192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_conductor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770108571.278:16193): pid=136850 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108571.279:16194): pid=136850 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108571.283:16195): pid=136846 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=136849 suid=0 rport=56810 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108571.283:16196): pid=136846 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=136849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108571.286:16197): pid=136846 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108571.286:16198): pid=136846 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108571.287:16199): pid=136846 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108571.287:16200): pid=136846 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108571.287:16201): pid=136846 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=136846 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1770108575.180:16202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108575.293:16203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108579.413:16204): pid=137575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=137575 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108579.415:16205): pid=137574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=137575 suid=74 rport=40082 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108579.415:16206): pid=137574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=137575 suid=74 rport=40082 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108579.491:16207): pid=137574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108579.491:16208): pid=137574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108579.522:16209): pid=137574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108579.522:16210): pid=137574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=137575 suid=74 rport=40082 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108579.524:16211): pid=137574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108579.525:16212): pid=137574 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=68 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108579.525:16212): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe01e24f00 a2=1 a3=0 items=0 ppid=40636 pid=137574 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=68 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108579.525:16212): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108579.526:16213): pid=137574 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108579.562:16214): pid=137574 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108579.563:16215): pid=137577 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=137577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108579.564:16216): pid=137577 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108579.607:16217): pid=137574 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108579.607:16218): pid=137574 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108579.609:16219): pid=137574 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=137595 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108579.676:16220): pid=137595 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108579.676:16221): pid=137595 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F6D657461646174612E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108579.678:16222): pid=137595 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108579.683:16223): pid=137595 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108579.700:16224): pid=137595 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108579.701:16225): pid=137595 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108579.704:16226): pid=137574 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=137577 suid=0 rport=40082 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108579.704:16227): pid=137574 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=137577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108579.706:16228): pid=137574 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108579.707:16229): pid=137574 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108579.707:16230): pid=137574 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108579.707:16231): pid=137574 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108579.707:16232): pid=137574 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=137574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108579.721:16233): pid=137622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=137622 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108579.722:16234): pid=137620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=137622 suid=74 rport=40096 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108579.722:16235): pid=137620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=137622 suid=74 rport=40096 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108579.792:16236): pid=137620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108579.792:16237): pid=137620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108579.820:16238): pid=137620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108579.822:16239): pid=137620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=137622 suid=74 rport=40096 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108579.824:16240): pid=137620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108579.824:16241): pid=137620 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=69 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108579.824:16241): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe44db3310 a2=1 a3=0 items=0 ppid=40636 pid=137620 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=69 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108579.824:16241): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108579.826:16242): pid=137620 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108579.860:16243): pid=137620 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108579.862:16244): pid=137648 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=137648 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108579.863:16245): pid=137648 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108579.906:16246): pid=137620 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108579.906:16247): pid=137620 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108579.908:16248): pid=137620 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=137657 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108579.969:16249): pid=137657 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108579.969:16250): pid=137657 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6E6F76615F6D657461646174612E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108579.971:16251): pid=137657 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108579.975:16252): pid=137657 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1770108583.211:16253): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1770108583.381:16254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770108583.385:16255): pid=137657 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108583.385:16256): pid=137657 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108583.389:16257): pid=137620 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=137648 suid=0 rport=40096 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108583.389:16258): pid=137620 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=137648 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108583.393:16259): pid=137620 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108583.393:16260): pid=137620 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108583.394:16261): pid=137620 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108583.394:16262): pid=137620 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108583.394:16263): pid=137620 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=137620 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1770108592.144:16264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108592.146:16265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108592.149:16266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108592.151:16267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108592.299:16268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108592.312:16269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108592.346:16270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9f5909844e928f0e0c77126cace64fa78151fe1c52be432ba35292ae0f8d96ff comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108592.392:16271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c9afda43928a7b532983b65b6ee352c8f22ea172d9fefa29431daa5e761ba7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1770108593.645:16272): pid=136817 uid=0 auid=0 ses=66 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1770108593.646:16273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108593.685:16274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108595.677:16275): pid=138413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=138413 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108595.678:16276): pid=138412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=138413 suid=74 rport=51528 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108595.679:16277): pid=138412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=138413 suid=74 rport=51528 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108595.747:16278): pid=138412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108595.747:16279): pid=138412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108595.775:16280): pid=138412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108595.776:16281): pid=138412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=138413 suid=74 rport=51528 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108595.778:16282): pid=138412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108595.778:16283): pid=138412 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=70 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108595.778:16283): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff318082f0 a2=1 a3=0 items=0 ppid=40636 pid=138412 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=70 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108595.778:16283): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108595.781:16284): pid=138412 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108595.801:16285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108595.805:16286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108595.808:16287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108595.811:16288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108595.843:16289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108595.886:16290): pid=138453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1770108595.887:16291): pid=138453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1770108595.888:16292): pid=138453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108595.889:16293): pid=138453 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=71 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108595.889:16293): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd711b5940 a2=1 a3=0 items=0 ppid=1 pid=138453 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=71 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108595.889:16293): proctitle="(systemd)" type=USER_START msg=audit(1770108595.892:16294): pid=138453 uid=0 auid=0 ses=71 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1770108595.908:16295): prog-id=1028 op=LOAD type=SYSCALL msg=audit(1770108595.908:16295): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff108fffa0 a2=90 a3=0 items=0 ppid=1 pid=138453 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=71 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108595.908:16295): proctitle="(systemd)" type=BPF msg=audit(1770108595.908:16296): prog-id=0 op=UNLOAD type=BPF msg=audit(1770108595.908:16297): prog-id=1029 op=LOAD type=SYSCALL msg=audit(1770108595.908:16297): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff10900040 a2=90 a3=4 items=0 ppid=1 pid=138453 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=71 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108595.908:16297): proctitle="(systemd)" type=BPF msg=audit(1770108595.908:16298): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770108596.027:16299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770108596.051:16300): pid=138412 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108596.052:16301): pid=138520 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=138520 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108596.052:16302): pid=138520 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1770108596.055:16303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770108596.097:16304): pid=138412 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108596.097:16305): pid=138412 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108596.099:16306): pid=138412 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=138524 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1770108596.115:16307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108596.156:16308): pid=138524 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108596.157:16309): pid=138524 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108596.158:16310): pid=138524 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108596.162:16311): pid=138524 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108596.173:16312): pid=138524 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108596.173:16313): pid=138524 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108596.175:16314): pid=138412 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108596.175:16315): pid=138412 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108596.176:16316): pid=138412 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=138520 suid=0 rport=51528 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108596.176:16317): pid=138412 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=138520 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108596.178:16318): pid=138412 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108596.179:16319): pid=138412 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108596.179:16320): pid=138412 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=138412 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1770108596.250:16321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3ff5cc03335a76380eba72025b483a3b8520ce38a9a8ac7ca9e9fb0ffac5ed4e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108596.308:16322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108598.593:16323): pid=138737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=138737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108598.595:16324): pid=138736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=138737 suid=74 rport=51544 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108598.595:16325): pid=138736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=138737 suid=74 rport=51544 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108598.668:16326): pid=138736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108598.668:16327): pid=138736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108598.695:16328): pid=138736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108598.696:16329): pid=138736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=138737 suid=74 rport=51544 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108598.698:16330): pid=138736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108598.698:16331): pid=138736 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=72 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108598.698:16331): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffee354bdc0 a2=1 a3=0 items=0 ppid=40636 pid=138736 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=72 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108598.698:16331): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108598.700:16332): pid=138736 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108598.730:16333): pid=138736 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108598.731:16334): pid=138739 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=138739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108598.732:16335): pid=138739 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108598.775:16336): pid=138736 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108598.775:16337): pid=138736 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108598.777:16338): pid=138736 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=138740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108598.843:16339): pid=138740 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108598.844:16340): pid=138740 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F766E635F70726F78792E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108598.846:16341): pid=138740 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108598.850:16342): pid=138740 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108598.867:16343): pid=138740 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108598.867:16344): pid=138740 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108598.869:16345): pid=138736 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=138739 suid=0 rport=51544 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108598.870:16346): pid=138736 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=138739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108598.873:16347): pid=138736 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108598.873:16348): pid=138736 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108598.874:16349): pid=138736 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108598.874:16350): pid=138736 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108598.874:16351): pid=138736 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=138736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108598.903:16352): pid=138819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=138819 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108598.904:16353): pid=138804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=138819 suid=74 rport=51560 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108598.904:16354): pid=138804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=138819 suid=74 rport=51560 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108598.987:16355): pid=138804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108598.987:16356): pid=138804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108599.014:16357): pid=138804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108599.014:16358): pid=138804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=138819 suid=74 rport=51560 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108599.017:16359): pid=138804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108599.018:16360): pid=138804 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=73 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108599.018:16360): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc501f5080 a2=1 a3=0 items=0 ppid=40636 pid=138804 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=73 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108599.018:16360): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108599.020:16361): pid=138804 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108599.050:16362): pid=138804 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108599.051:16363): pid=138840 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=138840 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108599.052:16364): pid=138840 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108599.094:16365): pid=138804 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108599.094:16366): pid=138804 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108599.096:16367): pid=138804 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=138841 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108599.158:16368): pid=138841 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108599.158:16369): pid=138841 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6E6F76615F766E635F70726F78792E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108599.159:16370): pid=138841 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108599.162:16371): pid=138841 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1770108599.618:16372): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1770108599.619:16373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108599.810:16374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108599.883:16375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_vnc_proxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770108599.888:16376): pid=138841 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108599.888:16377): pid=138841 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108599.891:16378): pid=138804 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=138840 suid=0 rport=51560 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108599.892:16379): pid=138804 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=138840 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108599.895:16380): pid=138804 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108599.896:16381): pid=138804 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108599.896:16382): pid=138804 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108599.897:16383): pid=138804 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108599.897:16384): pid=138804 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=138804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1770108600.144:16385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108600.463:16386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108600.498:16387): pid=139072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108600.500:16388): pid=139071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139072 suid=74 rport=51570 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108600.500:16389): pid=139071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139072 suid=74 rport=51570 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108600.574:16390): pid=139071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108600.574:16391): pid=139071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108600.591:16392): pid=139071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108600.591:16393): pid=139071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139072 suid=74 rport=51570 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108600.593:16394): pid=139071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108600.594:16395): pid=139071 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=74 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108600.594:16395): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdf752dbf0 a2=1 a3=0 items=0 ppid=40636 pid=139071 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=74 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108600.594:16395): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108600.595:16396): pid=139071 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108600.638:16397): pid=139071 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108600.639:16398): pid=139078 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139078 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108600.640:16399): pid=139078 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108600.660:16400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108600.660:16401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1770108600.683:16402): pid=139071 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108600.683:16403): pid=139071 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108600.686:16404): pid=139071 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108600.749:16405): pid=139082 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108600.750:16406): pid=139082 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108600.751:16407): pid=139082 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108600.758:16408): pid=139082 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108600.772:16409): pid=139082 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108600.773:16410): pid=139082 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108600.775:16411): pid=139071 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139078 suid=0 rport=51570 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108600.776:16412): pid=139071 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139078 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108600.779:16413): pid=139071 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108600.779:16414): pid=139071 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108600.780:16415): pid=139071 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108600.780:16416): pid=139071 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108600.780:16417): pid=139071 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108601.409:16418): pid=139162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108601.411:16419): pid=139161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139162 suid=74 rport=51580 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108601.411:16420): pid=139161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139162 suid=74 rport=51580 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108601.483:16421): pid=139161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108601.483:16422): pid=139161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108601.509:16423): pid=139161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108601.510:16424): pid=139161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139162 suid=74 rport=51580 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108601.512:16425): pid=139161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108601.512:16426): pid=139161 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=75 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108601.512:16426): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe824d5ec0 a2=1 a3=0 items=0 ppid=40636 pid=139161 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=75 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108601.512:16426): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108601.514:16427): pid=139161 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108601.544:16428): pid=139161 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108601.545:16429): pid=139169 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139169 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108601.546:16430): pid=139169 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108601.589:16431): pid=139161 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108601.589:16432): pid=139161 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108601.590:16433): pid=139161 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139170 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108601.651:16434): pid=139170 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108601.651:16435): pid=139170 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108601.653:16436): pid=139170 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108601.657:16437): pid=139170 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108601.670:16438): pid=139170 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108601.670:16439): pid=139170 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108601.673:16440): pid=139161 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139169 suid=0 rport=51580 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108601.673:16441): pid=139161 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139169 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108601.676:16442): pid=139161 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108601.676:16443): pid=139161 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108601.677:16444): pid=139161 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108601.677:16445): pid=139161 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108601.677:16446): pid=139161 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139161 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108602.286:16447): pid=139194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139194 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108602.288:16448): pid=139186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139194 suid=74 rport=51592 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108602.288:16449): pid=139186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139194 suid=74 rport=51592 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108602.359:16450): pid=139186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108602.359:16451): pid=139186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108602.389:16452): pid=139186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108602.389:16453): pid=139186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139194 suid=74 rport=51592 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108602.391:16454): pid=139186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108602.392:16455): pid=139186 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=76 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108602.392:16455): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc239431f0 a2=1 a3=0 items=0 ppid=40636 pid=139186 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=76 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108602.392:16455): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108602.393:16456): pid=139186 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108602.422:16457): pid=139186 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108602.423:16458): pid=139197 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139197 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108602.425:16459): pid=139197 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108602.469:16460): pid=139186 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108602.469:16461): pid=139186 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108602.471:16462): pid=139186 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139198 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108602.541:16463): pid=139198 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108602.541:16464): pid=139198 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6576616C7561746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108602.542:16465): pid=139198 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108602.547:16466): pid=139198 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108602.560:16467): pid=139198 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108602.561:16468): pid=139198 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108602.564:16469): pid=139186 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139197 suid=0 rport=51592 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108602.564:16470): pid=139186 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139197 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108602.567:16471): pid=139186 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108602.568:16472): pid=139186 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108602.568:16473): pid=139186 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108602.568:16474): pid=139186 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108602.569:16475): pid=139186 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139186 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108603.097:16476): pid=139214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139214 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108603.098:16477): pid=139213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139214 suid=74 rport=51604 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108603.098:16478): pid=139213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139214 suid=74 rport=51604 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108603.168:16479): pid=139213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108603.168:16480): pid=139213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108603.201:16481): pid=139213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108603.202:16482): pid=139213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139214 suid=74 rport=51604 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108603.204:16483): pid=139213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108603.204:16484): pid=139213 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=77 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108603.204:16484): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd1b1a8a20 a2=1 a3=0 items=0 ppid=40636 pid=139213 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=77 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108603.204:16484): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108603.206:16485): pid=139213 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108603.241:16486): pid=139213 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108603.242:16487): pid=139218 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139218 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108603.243:16488): pid=139218 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108603.285:16489): pid=139213 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108603.285:16490): pid=139213 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108603.286:16491): pid=139213 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108603.327:16492): pid=139219 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108603.327:16493): pid=139219 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6C697374656E65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108603.328:16494): pid=139219 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108603.330:16495): pid=139219 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108603.339:16496): pid=139219 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108603.339:16497): pid=139219 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108603.342:16498): pid=139213 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139218 suid=0 rport=51604 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108603.343:16499): pid=139213 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139218 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108603.345:16500): pid=139213 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108603.345:16501): pid=139213 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108603.346:16502): pid=139213 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108603.346:16503): pid=139213 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108603.346:16504): pid=139213 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108603.936:16505): pid=139243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108603.938:16506): pid=139242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139243 suid=74 rport=51612 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108603.938:16507): pid=139242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139243 suid=74 rport=51612 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108604.010:16508): pid=139242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108604.010:16509): pid=139242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108604.038:16510): pid=139242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108604.038:16511): pid=139242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139243 suid=74 rport=51612 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108604.040:16512): pid=139242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108604.040:16513): pid=139242 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=78 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108604.040:16513): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd428fe850 a2=1 a3=0 items=0 ppid=40636 pid=139242 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=78 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108604.040:16513): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108604.042:16514): pid=139242 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108604.067:16515): pid=139242 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108604.068:16516): pid=139245 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139245 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108604.069:16517): pid=139245 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108604.111:16518): pid=139242 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108604.111:16519): pid=139242 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108604.113:16520): pid=139242 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139246 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108604.174:16521): pid=139246 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108604.174:16522): pid=139246 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6E6F7469666965722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108604.175:16523): pid=139246 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108604.178:16524): pid=139246 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108604.190:16525): pid=139246 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108604.190:16526): pid=139246 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108604.193:16527): pid=139242 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139245 suid=0 rport=51612 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108604.193:16528): pid=139242 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139245 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108604.196:16529): pid=139242 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108604.196:16530): pid=139242 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108604.197:16531): pid=139242 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108604.197:16532): pid=139242 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108604.197:16533): pid=139242 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108604.784:16534): pid=139270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139270 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108604.786:16535): pid=139269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139270 suid=74 rport=51620 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108604.786:16536): pid=139269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139270 suid=74 rport=51620 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108604.862:16537): pid=139269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108604.863:16538): pid=139269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108604.890:16539): pid=139269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108604.890:16540): pid=139269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139270 suid=74 rport=51620 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108604.892:16541): pid=139269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108604.892:16542): pid=139269 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=79 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108604.892:16542): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff1a5b2170 a2=1 a3=0 items=0 ppid=40636 pid=139269 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=79 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108604.892:16542): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108604.894:16543): pid=139269 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108604.924:16544): pid=139269 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108604.926:16545): pid=139272 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139272 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108604.927:16546): pid=139272 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108604.970:16547): pid=139269 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108604.970:16548): pid=139269 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108604.972:16549): pid=139269 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108605.024:16550): pid=139273 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108605.025:16551): pid=139273 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F63656E7472616C2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108605.027:16552): pid=139273 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108605.030:16553): pid=139273 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108605.038:16554): pid=139273 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108605.038:16555): pid=139273 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108605.040:16556): pid=139269 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139272 suid=0 rport=51620 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108605.040:16557): pid=139269 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139272 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108605.043:16558): pid=139269 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108605.043:16559): pid=139269 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108605.044:16560): pid=139269 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108605.044:16561): pid=139269 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108605.044:16562): pid=139269 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108605.657:16563): pid=139297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108605.658:16564): pid=139296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139297 suid=74 rport=57568 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108605.658:16565): pid=139296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139297 suid=74 rport=57568 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108605.729:16566): pid=139296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108605.729:16567): pid=139296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108605.749:16568): pid=139296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108605.750:16569): pid=139296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139297 suid=74 rport=57568 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108605.752:16570): pid=139296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108605.752:16571): pid=139296 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=80 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108605.752:16571): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff63f42da0 a2=1 a3=0 items=0 ppid=40636 pid=139296 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=80 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108605.752:16571): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108605.754:16572): pid=139296 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108605.774:16573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770108605.793:16574): pid=139296 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108605.794:16575): pid=139305 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108605.795:16576): pid=139305 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108605.838:16577): pid=139296 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108605.838:16578): pid=139296 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108605.839:16579): pid=139296 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139313 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108605.888:16580): pid=139313 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108605.888:16581): pid=139313 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F636F6D707574652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108605.889:16582): pid=139313 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108605.893:16583): pid=139313 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108605.905:16584): pid=139313 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108605.905:16585): pid=139313 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108605.907:16586): pid=139296 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139305 suid=0 rport=57568 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108605.907:16587): pid=139296 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108605.911:16588): pid=139296 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108605.912:16589): pid=139296 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108605.912:16590): pid=139296 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108605.912:16591): pid=139296 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108605.913:16592): pid=139296 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108605.938:16593): pid=139355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139355 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108605.939:16594): pid=139353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139355 suid=74 rport=57574 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108605.939:16595): pid=139353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139355 suid=74 rport=57574 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770108605.964:16596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1770108606.011:16597): pid=139353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108606.011:16598): pid=139353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108606.038:16599): pid=139353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108606.039:16600): pid=139353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139355 suid=74 rport=57574 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108606.041:16601): pid=139353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108606.041:16602): pid=139353 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=81 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108606.041:16602): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd5bf0d480 a2=1 a3=0 items=0 ppid=40636 pid=139353 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=81 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108606.041:16602): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108606.044:16603): pid=139353 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108606.072:16604): pid=139353 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108606.073:16605): pid=139358 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139358 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108606.074:16606): pid=139358 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108606.116:16607): pid=139353 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108606.116:16608): pid=139353 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108606.117:16609): pid=139353 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139359 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108606.179:16610): pid=139359 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108606.179:16611): pid=139359 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6365696C6F6D657465725F6167656E745F636F6D707574652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108606.180:16612): pid=139359 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108606.183:16613): pid=139359 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1770108606.576:16614): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1770108606.753:16615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ceilometer_agent_compute comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770108606.758:16616): pid=139359 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108606.758:16617): pid=139359 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108606.762:16618): pid=139353 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139358 suid=0 rport=57574 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108606.762:16619): pid=139353 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139358 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108606.765:16620): pid=139353 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108606.765:16621): pid=139353 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108606.766:16622): pid=139353 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108606.766:16623): pid=139353 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108606.766:16624): pid=139353 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108607.364:16625): pid=139477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139477 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108607.365:16626): pid=139476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139477 suid=74 rport=57588 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108607.366:16627): pid=139476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139477 suid=74 rport=57588 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108607.443:16628): pid=139476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108607.443:16629): pid=139476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108607.471:16630): pid=139476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108607.472:16631): pid=139476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139477 suid=74 rport=57588 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108607.474:16632): pid=139476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108607.474:16633): pid=139476 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=82 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108607.474:16633): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc1019e220 a2=1 a3=0 items=0 ppid=40636 pid=139476 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=82 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108607.474:16633): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108607.475:16634): pid=139476 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108607.510:16635): pid=139476 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108607.511:16636): pid=139487 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139487 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108607.512:16637): pid=139487 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108607.555:16638): pid=139476 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108607.555:16639): pid=139476 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108607.558:16640): pid=139476 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139488 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108607.618:16641): pid=139488 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108607.618:16642): pid=139488 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F69706D692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108607.619:16643): pid=139488 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108607.625:16644): pid=139488 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108607.638:16645): pid=139488 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108607.638:16646): pid=139488 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108607.641:16647): pid=139476 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139487 suid=0 rport=57588 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108607.641:16648): pid=139476 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139487 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108607.644:16649): pid=139476 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108607.644:16650): pid=139476 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108607.645:16651): pid=139476 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108607.645:16652): pid=139476 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108607.645:16653): pid=139476 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139476 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108607.667:16654): pid=139504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108607.668:16655): pid=139503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139504 suid=74 rport=57598 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108607.668:16656): pid=139503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139504 suid=74 rport=57598 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108607.740:16657): pid=139503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108607.740:16658): pid=139503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108607.771:16659): pid=139503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108607.771:16660): pid=139503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139504 suid=74 rport=57598 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108607.774:16661): pid=139503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108607.774:16662): pid=139503 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=83 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108607.774:16662): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe23a093b0 a2=1 a3=0 items=0 ppid=40636 pid=139503 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=83 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108607.774:16662): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108607.775:16663): pid=139503 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108607.813:16664): pid=139503 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108607.814:16665): pid=139506 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139506 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108607.815:16666): pid=139506 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108607.857:16667): pid=139503 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108607.857:16668): pid=139503 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108607.858:16669): pid=139503 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108607.916:16670): pid=139507 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108607.916:16671): pid=139507 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6365696C6F6D657465725F6167656E745F69706D692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108607.917:16672): pid=139507 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108607.920:16673): pid=139507 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1770108608.350:16674): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1770108608.508:16675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ceilometer_agent_ipmi comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770108608.513:16676): pid=139507 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108608.513:16677): pid=139507 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108608.517:16678): pid=139503 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139506 suid=0 rport=57598 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108608.517:16679): pid=139503 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139506 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108608.520:16680): pid=139503 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108608.520:16681): pid=139503 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108608.520:16682): pid=139503 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108608.520:16683): pid=139503 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108608.520:16684): pid=139503 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139503 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108609.176:16685): pid=139777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108609.176:16686): pid=139776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139777 suid=74 rport=57612 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108609.177:16687): pid=139776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139777 suid=74 rport=57612 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108609.247:16688): pid=139776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108609.247:16689): pid=139776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108609.274:16690): pid=139776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108609.274:16691): pid=139776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139777 suid=74 rport=57612 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108609.275:16692): pid=139776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108609.276:16693): pid=139776 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=84 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108609.276:16693): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc486681f0 a2=1 a3=0 items=0 ppid=40636 pid=139776 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=84 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108609.276:16693): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108609.277:16694): pid=139776 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108609.302:16695): pid=139776 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108609.303:16696): pid=139779 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139779 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108609.304:16697): pid=139779 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108609.347:16698): pid=139776 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108609.347:16699): pid=139776 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108609.350:16700): pid=139776 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139780 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108609.412:16701): pid=139780 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108609.412:16702): pid=139780 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F6E6F74696669636174696F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108609.414:16703): pid=139780 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108609.420:16704): pid=139780 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108609.433:16705): pid=139780 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108609.434:16706): pid=139780 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108609.437:16707): pid=139776 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139779 suid=0 rport=57612 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108609.437:16708): pid=139776 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139779 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108609.440:16709): pid=139776 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108609.440:16710): pid=139776 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108609.441:16711): pid=139776 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108609.441:16712): pid=139776 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108609.441:16713): pid=139776 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108610.680:16714): pid=139812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139812 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108610.681:16715): pid=139811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139812 suid=74 rport=57618 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108610.681:16716): pid=139811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139812 suid=74 rport=57618 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108610.759:16717): pid=139811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108610.759:16718): pid=139811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108610.785:16719): pid=139811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108610.786:16720): pid=139811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139812 suid=74 rport=57618 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108610.788:16721): pid=139811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108610.788:16722): pid=139811 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=85 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108610.788:16722): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffda8944010 a2=1 a3=0 items=0 ppid=40636 pid=139811 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=85 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108610.788:16722): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108610.790:16723): pid=139811 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108610.822:16724): pid=139811 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108610.823:16725): pid=139814 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108610.824:16726): pid=139814 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108610.866:16727): pid=139811 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108610.866:16728): pid=139811 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108610.867:16729): pid=139811 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139815 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108610.927:16730): pid=139815 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108610.928:16731): pid=139815 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F766E5F636C75737465725F6E6F727468642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108610.928:16732): pid=139815 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108610.932:16733): pid=139815 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108610.945:16734): pid=139815 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108610.946:16735): pid=139815 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108610.948:16736): pid=139811 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139814 suid=0 rport=57618 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108610.948:16737): pid=139811 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108610.950:16738): pid=139811 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108610.951:16739): pid=139811 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108610.951:16740): pid=139811 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108610.951:16741): pid=139811 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108610.952:16742): pid=139811 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139811 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108611.560:16743): pid=139839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139839 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108611.561:16744): pid=139838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139839 suid=74 rport=57632 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108611.561:16745): pid=139838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139839 suid=74 rport=57632 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108611.631:16746): pid=139838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108611.631:16747): pid=139838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108611.658:16748): pid=139838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108611.659:16749): pid=139838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139839 suid=74 rport=57632 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108611.661:16750): pid=139838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108611.661:16751): pid=139838 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=86 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108611.661:16751): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd4ba12340 a2=1 a3=0 items=0 ppid=40636 pid=139838 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=86 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108611.661:16751): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108611.663:16752): pid=139838 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108611.695:16753): pid=139838 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108611.697:16754): pid=139841 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139841 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108611.698:16755): pid=139841 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108611.741:16756): pid=139838 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108611.741:16757): pid=139838 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108611.743:16758): pid=139838 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139842 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108611.798:16759): pid=139842 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108611.799:16760): pid=139842 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F6E657574726F6E5F6167656E742E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108611.800:16761): pid=139842 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108611.804:16762): pid=139842 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108611.815:16763): pid=139842 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108611.816:16764): pid=139842 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108611.819:16765): pid=139838 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139841 suid=0 rport=57632 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108611.820:16766): pid=139838 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139841 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108611.822:16767): pid=139838 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108611.823:16768): pid=139838 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108611.823:16769): pid=139838 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108611.823:16770): pid=139838 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108611.823:16771): pid=139838 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108612.458:16772): pid=139907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108612.459:16773): pid=139906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139907 suid=74 rport=57644 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108612.460:16774): pid=139906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139907 suid=74 rport=57644 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108612.532:16775): pid=139906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108612.532:16776): pid=139906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108612.559:16777): pid=139906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108612.560:16778): pid=139906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139907 suid=74 rport=57644 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108612.562:16779): pid=139906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108612.562:16780): pid=139906 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=87 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108612.562:16780): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe75ae5220 a2=1 a3=0 items=0 ppid=40636 pid=139906 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=87 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108612.562:16780): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108612.564:16781): pid=139906 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108612.599:16782): pid=139906 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108612.600:16783): pid=139917 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139917 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108612.601:16784): pid=139917 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108612.643:16785): pid=139906 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108612.643:16786): pid=139906 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108612.646:16787): pid=139906 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139920 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108612.707:16788): pid=139920 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108612.707:16789): pid=139920 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108612.709:16790): pid=139920 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108612.711:16791): pid=139920 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108612.725:16792): pid=139920 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108612.726:16793): pid=139920 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108612.734:16794): pid=139906 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139917 suid=0 rport=57644 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108612.734:16795): pid=139906 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139917 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108612.736:16796): pid=139906 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108612.737:16797): pid=139906 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108612.737:16798): pid=139906 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108612.737:16799): pid=139906 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108612.737:16800): pid=139906 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108613.009:16801): pid=139939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139939 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108613.332:16802): pid=139998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139998 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108613.333:16803): pid=139997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139998 suid=74 rport=57646 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108613.333:16804): pid=139997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=139998 suid=74 rport=57646 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108613.401:16805): pid=139997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108613.401:16806): pid=139997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108613.430:16807): pid=139997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108613.430:16808): pid=139997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139998 suid=74 rport=57646 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108613.433:16809): pid=139997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108613.433:16810): pid=139997 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=88 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108613.433:16810): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff0878c150 a2=1 a3=0 items=0 ppid=40636 pid=139997 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=88 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108613.433:16810): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108613.435:16811): pid=139997 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108613.475:16812): pid=139997 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108613.476:16813): pid=140003 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108613.477:16814): pid=140003 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108613.520:16815): pid=139997 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108613.520:16816): pid=139997 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108613.521:16817): pid=139997 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140007 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108613.569:16818): pid=140007 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108613.570:16819): pid=140007 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F696E73706563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108613.572:16820): pid=140007 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108613.575:16821): pid=140007 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108613.585:16822): pid=140007 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108613.586:16823): pid=140007 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108613.588:16824): pid=139997 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140003 suid=0 rport=57646 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108613.588:16825): pid=139997 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108613.591:16826): pid=139997 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108613.591:16827): pid=139997 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108613.592:16828): pid=139997 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108613.592:16829): pid=139997 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108613.592:16830): pid=139997 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=139997 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108614.289:16831): pid=140090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108614.290:16832): pid=140089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140090 suid=74 rport=57654 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108614.290:16833): pid=140089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140090 suid=74 rport=57654 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108614.362:16834): pid=140089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108614.362:16835): pid=140089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108614.390:16836): pid=140089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108614.391:16837): pid=140089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140090 suid=74 rport=57654 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108614.393:16838): pid=140089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108614.393:16839): pid=140089 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=89 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108614.393:16839): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffd4ca9890 a2=1 a3=0 items=0 ppid=40636 pid=140089 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=89 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108614.393:16839): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108614.395:16840): pid=140089 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108614.427:16841): pid=140089 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108614.428:16842): pid=140093 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140093 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108614.429:16843): pid=140093 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108614.471:16844): pid=140089 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108614.471:16845): pid=140089 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108614.473:16846): pid=140089 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140094 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108614.531:16847): pid=140094 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108614.532:16848): pid=140094 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108614.532:16849): pid=140094 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108614.535:16850): pid=140094 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108614.548:16851): pid=140094 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108614.548:16852): pid=140094 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108614.550:16853): pid=140089 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140093 suid=0 rport=57654 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108614.550:16854): pid=140089 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140093 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108614.553:16855): pid=140089 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108614.553:16856): pid=140089 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108614.554:16857): pid=140089 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108614.554:16858): pid=140089 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108614.554:16859): pid=140089 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140089 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108615.130:16860): pid=140119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108615.131:16861): pid=140118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140119 suid=74 rport=34748 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108615.131:16862): pid=140118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140119 suid=74 rport=34748 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108615.202:16863): pid=140118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108615.202:16864): pid=140118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108615.228:16865): pid=140118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108615.228:16866): pid=140118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140119 suid=74 rport=34748 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108615.231:16867): pid=140118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108615.231:16868): pid=140118 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=90 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108615.231:16868): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffceee07c20 a2=1 a3=0 items=0 ppid=40636 pid=140118 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=90 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108615.231:16868): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108615.233:16869): pid=140118 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108615.256:16870): pid=140118 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108615.257:16871): pid=140121 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108615.258:16872): pid=140121 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108615.300:16873): pid=140118 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108615.300:16874): pid=140118 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108615.302:16875): pid=140118 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108615.361:16876): pid=140122 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108615.361:16877): pid=140122 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F696E73706563746F725F646E736D6173712E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108615.362:16878): pid=140122 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108615.365:16879): pid=140122 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108615.374:16880): pid=140122 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108615.374:16881): pid=140122 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108615.376:16882): pid=140118 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140121 suid=0 rport=34748 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108615.377:16883): pid=140118 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108615.379:16884): pid=140118 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108615.379:16885): pid=140118 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108615.380:16886): pid=140118 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108615.380:16887): pid=140118 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108615.380:16888): pid=140118 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108616.018:16889): pid=140146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140146 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108616.019:16890): pid=140145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140146 suid=74 rport=34758 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108616.020:16891): pid=140145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140146 suid=74 rport=34758 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108616.091:16892): pid=140145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108616.091:16893): pid=140145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108616.118:16894): pid=140145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108616.118:16895): pid=140145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140146 suid=74 rport=34758 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108616.120:16896): pid=140145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108616.120:16897): pid=140145 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=91 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108616.120:16897): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe27800c70 a2=1 a3=0 items=0 ppid=40636 pid=140145 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=91 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108616.120:16897): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108616.122:16898): pid=140145 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108616.152:16899): pid=140145 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108616.155:16900): pid=140148 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108616.156:16901): pid=140148 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108616.199:16902): pid=140145 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108616.199:16903): pid=140145 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108616.201:16904): pid=140145 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108616.247:16905): pid=140149 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108616.247:16906): pid=140149 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F7078655F687474702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108616.248:16907): pid=140149 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108616.251:16908): pid=140149 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108616.264:16909): pid=140149 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108616.265:16910): pid=140149 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108616.268:16911): pid=140145 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140148 suid=0 rport=34758 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108616.268:16912): pid=140145 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108616.270:16913): pid=140145 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108616.270:16914): pid=140145 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108616.271:16915): pid=140145 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108616.271:16916): pid=140145 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108616.271:16917): pid=140145 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140145 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108616.849:16918): pid=140226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140226 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108616.850:16919): pid=140225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140226 suid=74 rport=34766 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108616.850:16920): pid=140225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140226 suid=74 rport=34766 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108616.921:16921): pid=140225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108616.921:16922): pid=140225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108616.936:16923): pid=140225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108616.936:16924): pid=140225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140226 suid=74 rport=34766 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108616.938:16925): pid=140225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108616.939:16926): pid=140225 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=92 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108616.939:16926): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe9245ef40 a2=1 a3=0 items=0 ppid=40636 pid=140225 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=92 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108616.939:16926): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108616.940:16927): pid=140225 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108616.982:16928): pid=140225 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108616.983:16929): pid=140228 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140228 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108616.983:16930): pid=140228 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108617.025:16931): pid=140225 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108617.025:16932): pid=140225 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108617.026:16933): pid=140225 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140229 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108617.091:16934): pid=140229 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108617.091:16935): pid=140229 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F7078655F746674702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108617.092:16936): pid=140229 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108617.095:16937): pid=140229 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108617.111:16938): pid=140229 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108617.112:16939): pid=140229 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108617.114:16940): pid=140225 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140228 suid=0 rport=34766 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108617.114:16941): pid=140225 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140228 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108617.117:16942): pid=140225 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108617.118:16943): pid=140225 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108617.119:16944): pid=140225 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108617.119:16945): pid=140225 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108617.119:16946): pid=140225 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140225 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108617.654:16947): pid=140248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140248 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108617.655:16948): pid=140244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140248 suid=74 rport=34772 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108617.656:16949): pid=140244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140248 suid=74 rport=34772 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108617.729:16950): pid=140244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108617.729:16951): pid=140244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108617.757:16952): pid=140244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108617.758:16953): pid=140244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140248 suid=74 rport=34772 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108617.762:16954): pid=140244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108617.762:16955): pid=140244 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=93 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108617.762:16955): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd6070a7f0 a2=1 a3=0 items=0 ppid=40636 pid=140244 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=93 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108617.762:16955): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108617.764:16956): pid=140244 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108617.794:16957): pid=140244 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108617.795:16958): pid=140255 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140255 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108617.796:16959): pid=140255 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108617.839:16960): pid=140244 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108617.839:16961): pid=140244 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108617.841:16962): pid=140244 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140256 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108617.883:16963): pid=140244 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140255 suid=0 rport=34772 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108617.884:16964): pid=140244 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140255 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108617.886:16965): pid=140244 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108617.887:16966): pid=140244 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108617.887:16967): pid=140244 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108617.888:16968): pid=140244 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108617.888:16969): pid=140244 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108618.414:16970): pid=140363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108618.415:16971): pid=140353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140363 suid=74 rport=34780 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108618.416:16972): pid=140353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140363 suid=74 rport=34780 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108618.487:16973): pid=140353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108618.487:16974): pid=140353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108618.506:16975): pid=140353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108618.507:16976): pid=140353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140363 suid=74 rport=34780 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108618.509:16977): pid=140353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108618.510:16978): pid=140353 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=94 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108618.510:16978): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd4b1d13d0 a2=1 a3=0 items=0 ppid=40636 pid=140353 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=94 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108618.510:16978): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108618.512:16979): pid=140353 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108618.548:16980): pid=140353 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108618.550:16981): pid=140395 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140395 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108618.551:16982): pid=140395 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108618.593:16983): pid=140353 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108618.593:16984): pid=140353 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108618.595:16985): pid=140353 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140396 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108618.644:16986): pid=140353 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140395 suid=0 rport=34780 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108618.645:16987): pid=140353 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140395 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108618.647:16988): pid=140353 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108618.648:16989): pid=140353 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108618.648:16990): pid=140353 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108618.648:16991): pid=140353 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108618.649:16992): pid=140353 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108619.164:16993): pid=140500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140500 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108619.165:16994): pid=140499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140500 suid=74 rport=34790 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108619.165:16995): pid=140499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140500 suid=74 rport=34790 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108619.235:16996): pid=140499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108619.235:16997): pid=140499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108619.267:16998): pid=140499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108619.268:16999): pid=140499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140500 suid=74 rport=34790 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108619.271:17000): pid=140499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108619.271:17001): pid=140499 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=95 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108619.271:17001): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffffa953830 a2=1 a3=0 items=0 ppid=40636 pid=140499 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=95 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108619.271:17001): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108619.273:17002): pid=140499 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108619.303:17003): pid=140499 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108619.305:17004): pid=140502 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108619.306:17005): pid=140502 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108619.350:17006): pid=140499 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108619.350:17007): pid=140499 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108619.352:17008): pid=140499 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140503 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108619.394:17009): pid=140499 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140502 suid=0 rport=34790 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108619.394:17010): pid=140499 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108619.397:17011): pid=140499 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108619.397:17012): pid=140499 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108619.398:17013): pid=140499 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108619.398:17014): pid=140499 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108619.398:17015): pid=140499 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140499 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108619.922:17016): pid=140525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140525 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108619.923:17017): pid=140524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140525 suid=74 rport=34794 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108619.924:17018): pid=140524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140525 suid=74 rport=34794 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108619.995:17019): pid=140524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108619.995:17020): pid=140524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108620.027:17021): pid=140524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108620.027:17022): pid=140524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140525 suid=74 rport=34794 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108620.030:17023): pid=140524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108620.030:17024): pid=140524 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=96 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108620.030:17024): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcb6502e10 a2=1 a3=0 items=0 ppid=40636 pid=140524 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=96 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108620.030:17024): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108620.032:17025): pid=140524 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108620.064:17026): pid=140524 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108620.066:17027): pid=140527 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108620.067:17028): pid=140527 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108620.110:17029): pid=140524 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108620.110:17030): pid=140524 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108620.112:17031): pid=140524 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140528 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108620.154:17032): pid=140524 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140527 suid=0 rport=34794 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108620.154:17033): pid=140524 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108620.156:17034): pid=140524 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108620.157:17035): pid=140524 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108620.157:17036): pid=140524 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108620.157:17037): pid=140524 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108620.157:17038): pid=140524 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140524 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108620.656:17039): pid=140542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140542 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108620.656:17040): pid=140541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140542 suid=74 rport=34806 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108620.656:17041): pid=140541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140542 suid=74 rport=34806 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108620.729:17042): pid=140541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108620.729:17043): pid=140541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108620.757:17044): pid=140541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108620.757:17045): pid=140541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140542 suid=74 rport=34806 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108620.760:17046): pid=140541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108620.760:17047): pid=140541 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=97 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108620.760:17047): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff4b0248b0 a2=1 a3=0 items=0 ppid=40636 pid=140541 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=97 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108620.760:17047): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108620.762:17048): pid=140541 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108620.799:17049): pid=140541 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108620.800:17050): pid=140552 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140552 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108620.801:17051): pid=140552 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108620.844:17052): pid=140541 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108620.844:17053): pid=140541 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108620.846:17054): pid=140541 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108620.889:17055): pid=140541 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140552 suid=0 rport=34806 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108620.890:17056): pid=140541 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140552 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108620.892:17057): pid=140541 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108620.893:17058): pid=140541 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108620.894:17059): pid=140541 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108620.894:17060): pid=140541 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108620.894:17061): pid=140541 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140541 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108621.432:17062): pid=140567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108621.434:17063): pid=140566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140567 suid=74 rport=34816 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108621.434:17064): pid=140566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140567 suid=74 rport=34816 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108621.523:17065): pid=140566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108621.523:17066): pid=140566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108621.551:17067): pid=140566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108621.552:17068): pid=140566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140567 suid=74 rport=34816 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108621.554:17069): pid=140566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108621.554:17070): pid=140566 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=98 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108621.554:17070): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcf7448060 a2=1 a3=0 items=0 ppid=40636 pid=140566 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=98 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108621.554:17070): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108621.556:17071): pid=140566 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108621.589:17072): pid=140566 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108621.591:17073): pid=140569 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140569 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108621.592:17074): pid=140569 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108621.635:17075): pid=140566 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108621.635:17076): pid=140566 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108621.637:17077): pid=140566 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108621.684:17078): pid=140566 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140569 suid=0 rport=34816 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108621.684:17079): pid=140566 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140569 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108621.686:17080): pid=140566 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108621.686:17081): pid=140566 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108621.687:17082): pid=140566 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108621.687:17083): pid=140566 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108621.687:17084): pid=140566 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140566 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108622.220:17085): pid=140592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140592 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108622.221:17086): pid=140591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140592 suid=74 rport=34818 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108622.221:17087): pid=140591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140592 suid=74 rport=34818 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108622.297:17088): pid=140591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108622.297:17089): pid=140591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108622.324:17090): pid=140591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108622.324:17091): pid=140591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140592 suid=74 rport=34818 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108622.327:17092): pid=140591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108622.327:17093): pid=140591 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=99 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108622.327:17093): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffee22ddaa0 a2=1 a3=0 items=0 ppid=40636 pid=140591 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=99 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108622.327:17093): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108622.329:17094): pid=140591 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108622.351:17095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108622.354:17096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770108622.365:17097): pid=140591 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108622.366:17098): pid=140596 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108622.367:17099): pid=140596 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108622.409:17100): pid=140591 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108622.409:17101): pid=140591 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108622.411:17102): pid=140591 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140616 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108622.456:17103): pid=140591 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140596 suid=0 rport=34818 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108622.458:17104): pid=140591 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108622.460:17105): pid=140591 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108622.460:17106): pid=140591 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108622.461:17107): pid=140591 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108622.461:17108): pid=140591 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108622.461:17109): pid=140591 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140591 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1770108622.468:17110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108622.551:17111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108622.970:17112): pid=140652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140652 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108622.972:17113): pid=140651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140652 suid=74 rport=34824 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108622.972:17114): pid=140651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140652 suid=74 rport=34824 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108623.042:17115): pid=140651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108623.042:17116): pid=140651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108623.058:17117): pid=140651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108623.058:17118): pid=140651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140652 suid=74 rport=34824 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108623.059:17119): pid=140651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108623.060:17120): pid=140651 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=100 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108623.060:17120): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe5c16e3a0 a2=1 a3=0 items=0 ppid=40636 pid=140651 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=100 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108623.060:17120): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108623.061:17121): pid=140651 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108623.082:17122): pid=140651 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108623.083:17123): pid=140654 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108623.084:17124): pid=140654 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108623.126:17125): pid=140651 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108623.126:17126): pid=140651 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108623.139:17127): pid=140651 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140655 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108623.172:17128): pid=140651 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108623.172:17129): pid=140651 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108623.173:17130): pid=140651 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140654 suid=0 rport=34824 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108623.173:17131): pid=140651 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108623.175:17132): pid=140651 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108623.175:17133): pid=140651 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108623.176:17134): pid=140651 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140651 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108623.678:17135): pid=140671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108623.679:17136): pid=140670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140671 suid=74 rport=34840 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108623.679:17137): pid=140670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140671 suid=74 rport=34840 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108623.757:17138): pid=140670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108623.757:17139): pid=140670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108623.785:17140): pid=140670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108623.785:17141): pid=140670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140671 suid=74 rport=34840 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108623.788:17142): pid=140670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108623.788:17143): pid=140670 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=101 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108623.788:17143): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe0798c890 a2=1 a3=0 items=0 ppid=40636 pid=140670 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=101 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108623.788:17143): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108623.789:17144): pid=140670 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108623.821:17145): pid=140670 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108623.822:17146): pid=140680 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108623.823:17147): pid=140680 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108623.866:17148): pid=140670 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108623.866:17149): pid=140670 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108623.867:17150): pid=140670 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140682 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108623.908:17151): pid=140670 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140680 suid=0 rport=34840 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108623.908:17152): pid=140670 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108623.910:17153): pid=140670 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108623.911:17154): pid=140670 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108623.911:17155): pid=140670 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108623.911:17156): pid=140670 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108623.911:17157): pid=140670 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108624.426:17158): pid=140696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140696 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108624.428:17159): pid=140695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140696 suid=74 rport=34844 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108624.428:17160): pid=140695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140696 suid=74 rport=34844 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108624.503:17161): pid=140695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108624.503:17162): pid=140695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108624.530:17163): pid=140695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108624.530:17164): pid=140695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140696 suid=74 rport=34844 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108624.532:17165): pid=140695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108624.532:17166): pid=140695 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=102 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108624.532:17166): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe19b29d00 a2=1 a3=0 items=0 ppid=40636 pid=140695 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=102 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108624.532:17166): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108624.534:17167): pid=140695 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108624.556:17168): pid=140695 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108624.557:17169): pid=140698 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108624.558:17170): pid=140698 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108624.601:17171): pid=140695 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108624.601:17172): pid=140695 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108624.603:17173): pid=140695 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108624.647:17174): pid=140695 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140698 suid=0 rport=34844 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108624.647:17175): pid=140695 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108624.650:17176): pid=140695 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108624.650:17177): pid=140695 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108624.651:17178): pid=140695 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108624.651:17179): pid=140695 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108624.651:17180): pid=140695 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108625.163:17181): pid=140770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108625.164:17182): pid=140769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140770 suid=74 rport=51306 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108625.164:17183): pid=140769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140770 suid=74 rport=51306 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108625.233:17184): pid=140769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108625.233:17185): pid=140769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108625.259:17186): pid=140769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108625.260:17187): pid=140769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140770 suid=74 rport=51306 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108625.262:17188): pid=140769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108625.262:17189): pid=140769 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=103 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108625.262:17189): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff5bd2a540 a2=1 a3=0 items=0 ppid=40636 pid=140769 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=103 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108625.262:17189): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108625.263:17190): pid=140769 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108625.291:17191): pid=140769 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108625.292:17192): pid=140772 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140772 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108625.293:17193): pid=140772 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108625.335:17194): pid=140769 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108625.335:17195): pid=140769 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108625.337:17196): pid=140769 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108625.382:17197): pid=140769 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140772 suid=0 rport=51306 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108625.382:17198): pid=140769 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140772 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108625.385:17199): pid=140769 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108625.386:17200): pid=140769 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108625.387:17201): pid=140769 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108625.387:17202): pid=140769 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108625.387:17203): pid=140769 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108625.925:17204): pid=140856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140856 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108625.927:17205): pid=140855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140856 suid=74 rport=51310 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108625.927:17206): pid=140855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=140856 suid=74 rport=51310 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108626.002:17207): pid=140855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108626.002:17208): pid=140855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108626.032:17209): pid=140855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108626.032:17210): pid=140855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140856 suid=74 rport=51310 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108626.034:17211): pid=140855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108626.034:17212): pid=140855 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=104 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108626.034:17212): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdba5161c0 a2=1 a3=0 items=0 ppid=40636 pid=140855 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=104 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108626.034:17212): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108626.036:17213): pid=140855 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108626.064:17214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770108626.072:17215): pid=140855 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108626.073:17216): pid=140859 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140859 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108626.074:17217): pid=140859 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108626.118:17218): pid=140855 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108626.118:17219): pid=140855 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108626.122:17220): pid=140855 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140871 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1770108626.154:17221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108626.185:17222): pid=140855 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140859 suid=0 rport=51310 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108626.186:17223): pid=140855 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140859 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108626.189:17224): pid=140855 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108626.189:17225): pid=140855 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108626.190:17226): pid=140855 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108626.190:17227): pid=140855 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108626.190:17228): pid=140855 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=140855 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1770108626.247:17229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108626.295:17230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108626.730:17231): pid=141029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141029 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108626.732:17232): pid=141028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141029 suid=74 rport=51318 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108626.732:17233): pid=141028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141029 suid=74 rport=51318 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108626.806:17234): pid=141028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108626.806:17235): pid=141028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108626.837:17236): pid=141028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108626.837:17237): pid=141028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141029 suid=74 rport=51318 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108626.839:17238): pid=141028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108626.839:17239): pid=141028 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=105 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108626.839:17239): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc35727dc0 a2=1 a3=0 items=0 ppid=40636 pid=141028 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=105 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108626.839:17239): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108626.840:17240): pid=141028 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108626.869:17241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770108626.886:17242): pid=141028 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108626.887:17243): pid=141044 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141044 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108626.888:17244): pid=141044 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108626.931:17245): pid=141028 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108626.931:17246): pid=141028 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108626.933:17247): pid=141028 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141052 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108626.986:17248): pid=141028 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108626.986:17249): pid=141028 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108626.987:17250): pid=141028 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141044 suid=0 rport=51318 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108626.988:17251): pid=141028 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141044 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108626.991:17252): pid=141028 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108626.991:17253): pid=141028 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108626.992:17254): pid=141028 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141028 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1770108627.356:17255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108627.515:17256): pid=141088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108627.516:17257): pid=141087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141088 suid=74 rport=51320 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108627.516:17258): pid=141087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141088 suid=74 rport=51320 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108627.588:17259): pid=141087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108627.588:17260): pid=141087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108627.616:17261): pid=141087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108627.616:17262): pid=141087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141088 suid=74 rport=51320 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108627.619:17263): pid=141087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108627.619:17264): pid=141087 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=106 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108627.619:17264): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc686b5e40 a2=1 a3=0 items=0 ppid=40636 pid=141087 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=106 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108627.619:17264): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108627.621:17265): pid=141087 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108627.651:17266): pid=141087 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108627.652:17267): pid=141090 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108627.653:17268): pid=141090 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108627.696:17269): pid=141087 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108627.696:17270): pid=141087 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108627.699:17271): pid=141087 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141091 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108627.744:17272): pid=141087 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141090 suid=0 rport=51320 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108627.745:17273): pid=141087 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108627.748:17274): pid=141087 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108627.748:17275): pid=141087 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108627.749:17276): pid=141087 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108627.749:17277): pid=141087 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108627.749:17278): pid=141087 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108628.294:17279): pid=141195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141195 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108628.295:17280): pid=141194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141195 suid=74 rport=51322 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108628.295:17281): pid=141194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141195 suid=74 rport=51322 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108628.365:17282): pid=141194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108628.365:17283): pid=141194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108628.392:17284): pid=141194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108628.393:17285): pid=141194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141195 suid=74 rport=51322 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108628.395:17286): pid=141194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108628.395:17287): pid=141194 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=107 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108628.395:17287): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdf42ed940 a2=1 a3=0 items=0 ppid=40636 pid=141194 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=107 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108628.395:17287): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108628.397:17288): pid=141194 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108628.424:17289): pid=141194 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108628.425:17290): pid=141197 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141197 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108628.426:17291): pid=141197 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108628.468:17292): pid=141194 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108628.468:17293): pid=141194 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108628.469:17294): pid=141194 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141203 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108628.511:17295): pid=141194 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108628.511:17296): pid=141194 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108628.511:17297): pid=141194 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141197 suid=0 rport=51322 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108628.511:17298): pid=141194 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141197 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108628.514:17299): pid=141194 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108628.514:17300): pid=141194 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108628.515:17301): pid=141194 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141194 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108629.031:17302): pid=141263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141263 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108629.032:17303): pid=141260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141263 suid=74 rport=51328 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108629.032:17304): pid=141260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141263 suid=74 rport=51328 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108629.108:17305): pid=141260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108629.109:17306): pid=141260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108629.135:17307): pid=141260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108629.136:17308): pid=141260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141263 suid=74 rport=51328 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108629.139:17309): pid=141260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108629.139:17310): pid=141260 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=108 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108629.139:17310): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffc5aff0a0 a2=1 a3=0 items=0 ppid=40636 pid=141260 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=108 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108629.139:17310): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108629.141:17311): pid=141260 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108629.171:17312): pid=141260 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108629.171:17313): pid=141345 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108629.173:17314): pid=141345 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108629.216:17315): pid=141260 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108629.216:17316): pid=141260 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108629.216:17317): pid=141260 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108629.257:17318): pid=141260 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141345 suid=0 rport=51328 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108629.257:17319): pid=141260 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108629.260:17320): pid=141260 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108629.261:17321): pid=141260 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108629.261:17322): pid=141260 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108629.261:17323): pid=141260 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108629.261:17324): pid=141260 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108629.823:17325): pid=141360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141360 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108629.824:17326): pid=141359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141360 suid=74 rport=51336 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108629.824:17327): pid=141359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141360 suid=74 rport=51336 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108629.894:17328): pid=141359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108629.894:17329): pid=141359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108629.921:17330): pid=141359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108629.921:17331): pid=141359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141360 suid=74 rport=51336 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108629.924:17332): pid=141359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108629.924:17333): pid=141359 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=109 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108629.924:17333): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe1b73c250 a2=1 a3=0 items=0 ppid=40636 pid=141359 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=109 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108629.924:17333): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108629.925:17334): pid=141359 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108629.943:17335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770108629.963:17336): pid=141359 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108629.964:17337): pid=141372 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141372 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108629.965:17338): pid=141372 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108630.008:17339): pid=141359 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108630.008:17340): pid=141359 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108630.011:17341): pid=141359 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141383 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108630.058:17342): pid=141359 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141372 suid=0 rport=51336 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108630.060:17343): pid=141359 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141372 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108630.062:17344): pid=141359 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108630.063:17345): pid=141359 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108630.064:17346): pid=141359 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108630.064:17347): pid=141359 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108630.068:17348): pid=141359 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141359 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1770108630.123:17349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108630.600:17350): pid=141413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141413 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108630.602:17351): pid=141412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141413 suid=74 rport=51338 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108630.602:17352): pid=141412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141413 suid=74 rport=51338 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108630.679:17353): pid=141412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108630.679:17354): pid=141412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108630.707:17355): pid=141412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108630.707:17356): pid=141412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141413 suid=74 rport=51338 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108630.709:17357): pid=141412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108630.710:17358): pid=141412 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=110 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108630.710:17358): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc8b2dbc50 a2=1 a3=0 items=0 ppid=40636 pid=141412 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=110 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108630.710:17358): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108630.712:17359): pid=141412 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108630.729:17360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770108630.748:17361): pid=141412 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108630.750:17362): pid=141421 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141421 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108630.750:17363): pid=141421 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108630.794:17364): pid=141412 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108630.795:17365): pid=141412 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108630.798:17366): pid=141412 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141427 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108630.851:17367): pid=141412 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141421 suid=0 rport=51338 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108630.853:17368): pid=141412 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141421 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108630.855:17369): pid=141412 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108630.856:17370): pid=141412 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108630.857:17371): pid=141412 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108630.858:17372): pid=141412 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108630.858:17373): pid=141412 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141412 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1770108631.059:17374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108631.374:17375): pid=141466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141466 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108631.375:17376): pid=141465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141466 suid=74 rport=51344 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108631.376:17377): pid=141465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141466 suid=74 rport=51344 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108631.446:17378): pid=141465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108631.446:17379): pid=141465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108631.473:17380): pid=141465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108631.474:17381): pid=141465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141466 suid=74 rport=51344 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108631.476:17382): pid=141465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108631.476:17383): pid=141465 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=111 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108631.476:17383): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcc11e3a40 a2=1 a3=0 items=0 ppid=40636 pid=141465 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=111 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108631.476:17383): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108631.478:17384): pid=141465 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108631.514:17385): pid=141465 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108631.516:17386): pid=141468 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141468 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108631.517:17387): pid=141468 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108631.559:17388): pid=141465 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108631.559:17389): pid=141465 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108631.561:17390): pid=141465 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141469 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108631.605:17391): pid=141465 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141468 suid=0 rport=51344 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108631.605:17392): pid=141465 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141468 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108631.608:17393): pid=141465 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108631.608:17394): pid=141465 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108631.609:17395): pid=141465 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108631.609:17396): pid=141465 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108631.609:17397): pid=141465 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141465 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108632.158:17398): pid=141491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141491 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108632.159:17399): pid=141490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141491 suid=74 rport=51360 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108632.159:17400): pid=141490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141491 suid=74 rport=51360 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108632.228:17401): pid=141490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108632.228:17402): pid=141490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108632.256:17403): pid=141490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108632.256:17404): pid=141490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141491 suid=74 rport=51360 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108632.258:17405): pid=141490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108632.258:17406): pid=141490 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=112 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108632.258:17406): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffffd09caa0 a2=1 a3=0 items=0 ppid=40636 pid=141490 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=112 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108632.258:17406): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108632.260:17407): pid=141490 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108632.296:17408): pid=141490 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108632.298:17409): pid=141493 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108632.299:17410): pid=141493 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108632.341:17411): pid=141490 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108632.341:17412): pid=141490 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108632.343:17413): pid=141490 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108632.388:17414): pid=141490 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141493 suid=0 rport=51360 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108632.389:17415): pid=141490 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108632.391:17416): pid=141490 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108632.392:17417): pid=141490 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108632.393:17418): pid=141490 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108632.393:17419): pid=141490 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108632.393:17420): pid=141490 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141490 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108632.935:17421): pid=141508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141508 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108632.936:17422): pid=141507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141508 suid=74 rport=51364 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108632.937:17423): pid=141507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141508 suid=74 rport=51364 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108633.008:17424): pid=141507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108633.008:17425): pid=141507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108633.036:17426): pid=141507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108633.037:17427): pid=141507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141508 suid=74 rport=51364 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108633.039:17428): pid=141507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108633.039:17429): pid=141507 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=113 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108633.039:17429): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffce73db810 a2=1 a3=0 items=0 ppid=40636 pid=141507 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=113 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108633.039:17429): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108633.041:17430): pid=141507 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108633.065:17431): pid=141507 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108633.066:17432): pid=141510 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108633.067:17433): pid=141510 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108633.109:17434): pid=141507 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108633.109:17435): pid=141507 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108633.111:17436): pid=141507 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108633.152:17437): pid=141507 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141510 suid=0 rport=51364 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108633.153:17438): pid=141507 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108633.155:17439): pid=141507 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108633.155:17440): pid=141507 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108633.156:17441): pid=141507 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108633.156:17442): pid=141507 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108633.156:17443): pid=141507 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108633.649:17444): pid=141571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141571 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108633.650:17445): pid=141570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141571 suid=74 rport=51372 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108633.650:17446): pid=141570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141571 suid=74 rport=51372 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108633.722:17447): pid=141570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108633.722:17448): pid=141570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108633.750:17449): pid=141570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108633.750:17450): pid=141570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141571 suid=74 rport=51372 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108633.752:17451): pid=141570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108633.753:17452): pid=141570 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=114 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108633.753:17452): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc2d8caa80 a2=1 a3=0 items=0 ppid=40636 pid=141570 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=114 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108633.753:17452): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108633.755:17453): pid=141570 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108633.788:17454): pid=141570 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108633.789:17455): pid=141573 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108633.790:17456): pid=141573 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108633.832:17457): pid=141570 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108633.832:17458): pid=141570 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108633.834:17459): pid=141570 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108633.877:17460): pid=141570 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141573 suid=0 rport=51372 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108633.877:17461): pid=141570 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108633.880:17462): pid=141570 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108633.880:17463): pid=141570 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108633.881:17464): pid=141570 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108633.881:17465): pid=141570 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108633.881:17466): pid=141570 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108634.418:17467): pid=141596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108634.419:17468): pid=141595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141596 suid=74 rport=51380 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108634.419:17469): pid=141595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141596 suid=74 rport=51380 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108634.492:17470): pid=141595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108634.492:17471): pid=141595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108634.518:17472): pid=141595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108634.518:17473): pid=141595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141596 suid=74 rport=51380 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108634.521:17474): pid=141595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108634.521:17475): pid=141595 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=115 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108634.521:17475): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffea58dc8a0 a2=1 a3=0 items=0 ppid=40636 pid=141595 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=115 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108634.521:17475): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108634.522:17476): pid=141595 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108634.549:17477): pid=141595 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108634.550:17478): pid=141598 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141598 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108634.551:17479): pid=141598 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108634.593:17480): pid=141595 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108634.593:17481): pid=141595 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108634.594:17482): pid=141595 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141599 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108634.633:17483): pid=141595 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141598 suid=0 rport=51380 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108634.633:17484): pid=141595 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141598 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108634.635:17485): pid=141595 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108634.636:17486): pid=141595 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108634.636:17487): pid=141595 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108634.636:17488): pid=141595 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108634.637:17489): pid=141595 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141595 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108635.172:17490): pid=141621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141621 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108635.173:17491): pid=141616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141621 suid=74 rport=58596 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108635.174:17492): pid=141616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141621 suid=74 rport=58596 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108635.246:17493): pid=141616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108635.246:17494): pid=141616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108635.261:17495): pid=141616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108635.262:17496): pid=141616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141621 suid=74 rport=58596 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108635.265:17497): pid=141616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108635.265:17498): pid=141616 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=116 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108635.265:17498): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffb806d450 a2=1 a3=0 items=0 ppid=40636 pid=141616 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=116 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108635.265:17498): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108635.267:17499): pid=141616 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108635.296:17500): pid=141616 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108635.298:17501): pid=141623 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141623 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108635.299:17502): pid=141623 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108635.341:17503): pid=141616 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108635.341:17504): pid=141616 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108635.343:17505): pid=141616 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141624 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108635.380:17506): pid=141616 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141623 suid=0 rport=58596 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108635.381:17507): pid=141616 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141623 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108635.383:17508): pid=141616 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108635.383:17509): pid=141616 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108635.384:17510): pid=141616 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108635.384:17511): pid=141616 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108635.384:17512): pid=141616 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141616 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108635.638:17513): pid=141638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108635.873:17514): pid=141640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141640 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108635.874:17515): pid=141639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141640 suid=74 rport=58602 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108635.874:17516): pid=141639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141640 suid=74 rport=58602 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108635.947:17517): pid=141639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108635.947:17518): pid=141639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108635.974:17519): pid=141639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108635.974:17520): pid=141639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141640 suid=74 rport=58602 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108635.977:17521): pid=141639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108635.977:17522): pid=141639 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=117 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108635.977:17522): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdd0e52e80 a2=1 a3=0 items=0 ppid=40636 pid=141639 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=117 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108635.977:17522): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108635.979:17523): pid=141639 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108636.001:17524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770108636.016:17525): pid=141639 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108636.017:17526): pid=141648 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141648 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108636.018:17527): pid=141648 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108636.060:17528): pid=141639 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108636.060:17529): pid=141639 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108636.063:17530): pid=141639 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141655 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108636.114:17531): pid=141639 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141648 suid=0 rport=58602 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108636.115:17532): pid=141639 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141648 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108636.118:17533): pid=141639 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108636.118:17534): pid=141639 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108636.119:17535): pid=141639 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108636.119:17536): pid=141639 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108636.119:17537): pid=141639 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1770108636.190:17538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108636.620:17539): pid=141731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141731 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108636.621:17540): pid=141721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141731 suid=74 rport=58618 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108636.621:17541): pid=141721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141731 suid=74 rport=58618 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108636.694:17542): pid=141721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108636.694:17543): pid=141721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108636.720:17544): pid=141721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108636.721:17545): pid=141721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141731 suid=74 rport=58618 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108636.723:17546): pid=141721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108636.723:17547): pid=141721 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=118 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108636.723:17547): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc625ffd80 a2=1 a3=0 items=0 ppid=40636 pid=141721 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=118 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108636.723:17547): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108636.724:17548): pid=141721 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108636.749:17549): pid=141721 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108636.750:17550): pid=141758 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108636.750:17551): pid=141758 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108636.793:17552): pid=141721 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108636.793:17553): pid=141721 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108636.795:17554): pid=141721 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141759 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108636.836:17555): pid=141721 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141758 suid=0 rport=58618 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108636.837:17556): pid=141721 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108636.839:17557): pid=141721 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108636.839:17558): pid=141721 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108636.839:17559): pid=141721 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108636.839:17560): pid=141721 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108636.839:17561): pid=141721 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141721 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108637.339:17562): pid=141781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141781 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108637.341:17563): pid=141780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141781 suid=74 rport=58632 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108637.341:17564): pid=141780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141781 suid=74 rport=58632 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108637.411:17565): pid=141780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108637.411:17566): pid=141780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108637.439:17567): pid=141780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108637.440:17568): pid=141780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141781 suid=74 rport=58632 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108637.442:17569): pid=141780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108637.443:17570): pid=141780 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=119 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108637.443:17570): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffda8de86f0 a2=1 a3=0 items=0 ppid=40636 pid=141780 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=119 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108637.443:17570): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108637.444:17571): pid=141780 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108637.477:17572): pid=141780 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108637.479:17573): pid=141783 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141783 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108637.480:17574): pid=141783 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108637.522:17575): pid=141780 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108637.522:17576): pid=141780 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108637.524:17577): pid=141780 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141784 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108637.566:17578): pid=141780 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108637.566:17579): pid=141780 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108637.566:17580): pid=141780 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141783 suid=0 rport=58632 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108637.567:17581): pid=141780 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141783 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108637.569:17582): pid=141780 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108637.569:17583): pid=141780 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108637.569:17584): pid=141780 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141780 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108638.107:17585): pid=141847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141847 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108638.130:17586): pid=141849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108638.131:17587): pid=141848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141849 suid=74 rport=58640 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108638.131:17588): pid=141848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=141849 suid=74 rport=58640 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108638.206:17589): pid=141848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108638.206:17590): pid=141848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108638.248:17591): pid=141848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108638.248:17592): pid=141848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141849 suid=74 rport=58640 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108638.251:17593): pid=141848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108638.251:17594): pid=141848 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=120 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108638.251:17594): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd055ed9b0 a2=1 a3=0 items=0 ppid=40636 pid=141848 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=120 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108638.251:17594): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108638.253:17595): pid=141848 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108638.278:17596): pid=141848 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108638.279:17597): pid=141934 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108638.279:17598): pid=141934 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108638.322:17599): pid=141848 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108638.322:17600): pid=141848 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108638.323:17601): pid=141848 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141944 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108638.360:17602): pid=141848 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108638.361:17603): pid=141848 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108638.361:17604): pid=141848 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141934 suid=0 rport=58640 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108638.361:17605): pid=141848 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108638.364:17606): pid=141848 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108638.364:17607): pid=141848 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108638.365:17608): pid=141848 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141848 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108638.913:17609): pid=142058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142058 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108638.914:17610): pid=142057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142058 suid=74 rport=58646 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108638.915:17611): pid=142057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142058 suid=74 rport=58646 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108638.996:17612): pid=142057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108638.996:17613): pid=142057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108639.024:17614): pid=142057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108639.025:17615): pid=142057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142058 suid=74 rport=58646 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108639.027:17616): pid=142057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108639.027:17617): pid=142057 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=121 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108639.027:17617): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe654e8830 a2=1 a3=0 items=0 ppid=40636 pid=142057 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=121 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108639.027:17617): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108639.028:17618): pid=142057 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108639.060:17619): pid=142057 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108639.062:17620): pid=142060 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108639.063:17621): pid=142060 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108639.105:17622): pid=142057 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108639.105:17623): pid=142057 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108639.106:17624): pid=142057 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142078 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108639.146:17625): pid=142057 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142060 suid=0 rport=58646 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108639.146:17626): pid=142057 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108639.148:17627): pid=142057 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108639.149:17628): pid=142057 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108639.149:17629): pid=142057 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108639.149:17630): pid=142057 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108639.149:17631): pid=142057 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142057 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108639.677:17632): pid=142221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108639.679:17633): pid=142220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142221 suid=74 rport=58660 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108639.679:17634): pid=142220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142221 suid=74 rport=58660 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108639.752:17635): pid=142220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108639.752:17636): pid=142220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108639.779:17637): pid=142220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108639.780:17638): pid=142220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142221 suid=74 rport=58660 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108639.783:17639): pid=142220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108639.783:17640): pid=142220 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=122 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108639.783:17640): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe07299f20 a2=1 a3=0 items=0 ppid=40636 pid=142220 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=122 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108639.783:17640): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108639.785:17641): pid=142220 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108639.812:17642): pid=142220 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108639.813:17643): pid=142237 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142237 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108639.814:17644): pid=142237 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108639.858:17645): pid=142220 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108639.858:17646): pid=142220 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108639.861:17647): pid=142220 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142240 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108639.898:17648): pid=142220 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142237 suid=0 rport=58660 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108639.899:17649): pid=142220 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142237 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108639.901:17650): pid=142220 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108639.902:17651): pid=142220 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108639.903:17652): pid=142220 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108639.903:17653): pid=142220 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108639.903:17654): pid=142220 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142220 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_SESSION msg=audit(1770108640.010:17655): pid=141637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=141638 suid=74 rport=52734 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108640.010:17656): pid=141637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=141638 suid=74 rport=52734 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108640.049:17657): pid=141846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=141847 suid=74 rport=45032 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108640.049:17658): pid=141846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=141847 suid=74 rport=45032 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108640.445:17659): pid=142354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142354 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108640.446:17660): pid=142353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142354 suid=74 rport=58676 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108640.446:17661): pid=142353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142354 suid=74 rport=58676 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108640.513:17662): pid=142353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108640.513:17663): pid=142353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108640.539:17664): pid=142353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108640.540:17665): pid=142353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142354 suid=74 rport=58676 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108640.542:17666): pid=142353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108640.542:17667): pid=142353 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=123 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108640.542:17667): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffca348daa0 a2=1 a3=0 items=0 ppid=40636 pid=142353 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=123 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108640.542:17667): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108640.544:17668): pid=142353 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108640.585:17669): pid=142353 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108640.586:17670): pid=142356 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142356 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108640.587:17671): pid=142356 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108640.630:17672): pid=142353 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108640.630:17673): pid=142353 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108640.631:17674): pid=142353 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142357 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108640.676:17675): pid=142353 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142356 suid=0 rport=58676 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108640.678:17676): pid=142353 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142356 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108640.680:17677): pid=142353 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108640.681:17678): pid=142353 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108640.681:17679): pid=142353 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108640.682:17680): pid=142353 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108640.682:17681): pid=142353 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108641.217:17682): pid=142371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142371 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108641.219:17683): pid=142370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142371 suid=74 rport=58688 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108641.219:17684): pid=142370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142371 suid=74 rport=58688 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108641.290:17685): pid=142370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108641.290:17686): pid=142370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108641.316:17687): pid=142370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108641.316:17688): pid=142370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142371 suid=74 rport=58688 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108641.319:17689): pid=142370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108641.319:17690): pid=142370 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=124 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108641.319:17690): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdc6b2c1a0 a2=1 a3=0 items=0 ppid=40636 pid=142370 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=124 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108641.319:17690): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108641.321:17691): pid=142370 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108641.355:17692): pid=142370 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108641.356:17693): pid=142380 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142380 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108641.357:17694): pid=142380 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108641.399:17695): pid=142370 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108641.399:17696): pid=142370 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108641.400:17697): pid=142370 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142382 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108641.439:17698): pid=142370 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142380 suid=0 rport=58688 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108641.440:17699): pid=142370 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142380 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108641.442:17700): pid=142370 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108641.442:17701): pid=142370 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108641.443:17702): pid=142370 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108641.443:17703): pid=142370 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108641.443:17704): pid=142370 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108641.758:17705): pid=141637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141638 suid=74 rport=52734 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108641.758:17706): pid=141637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141638 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108641.759:17707): pid=141637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108641.759:17708): pid=141637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141637 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108641.759:17709): pid=141637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108641.992:17710): pid=142396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142396 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108641.993:17711): pid=142395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142396 suid=74 rport=58690 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108641.994:17712): pid=142395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142396 suid=74 rport=58690 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108642.065:17713): pid=142395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108642.066:17714): pid=142395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108642.092:17715): pid=142395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108642.092:17716): pid=142395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142396 suid=74 rport=58690 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108642.095:17717): pid=142395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108642.095:17718): pid=142395 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=125 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108642.095:17718): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc08862b00 a2=1 a3=0 items=0 ppid=40636 pid=142395 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=125 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108642.095:17718): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108642.097:17719): pid=142395 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108642.166:17720): pid=142395 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108642.168:17721): pid=142398 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108642.169:17722): pid=142398 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108642.211:17723): pid=142395 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108642.211:17724): pid=142395 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108642.213:17725): pid=142395 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108642.254:17726): pid=142395 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142398 suid=0 rport=58690 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108642.254:17727): pid=142395 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108642.257:17728): pid=142395 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108642.257:17729): pid=142395 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108642.258:17730): pid=142395 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108642.258:17731): pid=142395 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108642.258:17732): pid=142395 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142395 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108642.769:17733): pid=142421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142421 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108642.770:17734): pid=142420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142421 suid=74 rport=58700 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108642.771:17735): pid=142420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142421 suid=74 rport=58700 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108642.845:17736): pid=142420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108642.845:17737): pid=142420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108642.872:17738): pid=142420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108642.872:17739): pid=142420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142421 suid=74 rport=58700 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108642.874:17740): pid=142420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108642.875:17741): pid=142420 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=126 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108642.875:17741): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffa8819fd0 a2=1 a3=0 items=0 ppid=40636 pid=142420 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=126 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108642.875:17741): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108642.877:17742): pid=142420 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108642.906:17743): pid=142420 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108642.908:17744): pid=142423 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142423 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108642.909:17745): pid=142423 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108642.951:17746): pid=142420 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108642.951:17747): pid=142420 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108642.952:17748): pid=142420 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108642.991:17749): pid=142420 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142423 suid=0 rport=58700 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108642.991:17750): pid=142420 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142423 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108642.993:17751): pid=142420 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108642.994:17752): pid=142420 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108642.994:17753): pid=142420 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108642.994:17754): pid=142420 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108642.994:17755): pid=142420 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142420 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108643.526:17756): pid=142448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142448 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108643.527:17757): pid=142447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142448 suid=74 rport=58712 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108643.527:17758): pid=142447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142448 suid=74 rport=58712 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108643.600:17759): pid=142447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108643.600:17760): pid=142447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108643.629:17761): pid=142447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108643.630:17762): pid=142447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142448 suid=74 rport=58712 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108643.632:17763): pid=142447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108643.633:17764): pid=142447 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=127 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108643.633:17764): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffec3810420 a2=1 a3=0 items=0 ppid=40636 pid=142447 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=127 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108643.633:17764): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108643.634:17765): pid=142447 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108643.669:17766): pid=142447 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108643.670:17767): pid=142450 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108643.671:17768): pid=142450 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108643.714:17769): pid=142447 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108643.714:17770): pid=142447 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108643.717:17771): pid=142447 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142451 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108643.756:17772): pid=142447 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142450 suid=0 rport=58712 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108643.756:17773): pid=142447 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108643.758:17774): pid=142447 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108643.759:17775): pid=142447 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108643.759:17776): pid=142447 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108643.759:17777): pid=142447 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108643.759:17778): pid=142447 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108644.322:17779): pid=142465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142465 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108644.323:17780): pid=142464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142465 suid=74 rport=58722 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108644.323:17781): pid=142464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142465 suid=74 rport=58722 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108644.403:17782): pid=142464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108644.403:17783): pid=142464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108644.429:17784): pid=142464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108644.429:17785): pid=142464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142465 suid=74 rport=58722 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108644.431:17786): pid=142464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108644.432:17787): pid=142464 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=128 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108644.432:17787): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd7081e7e0 a2=1 a3=0 items=0 ppid=40636 pid=142464 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=128 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108644.432:17787): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108644.433:17788): pid=142464 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108644.471:17789): pid=142464 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108644.472:17790): pid=142475 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142475 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108644.473:17791): pid=142475 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108644.515:17792): pid=142464 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108644.515:17793): pid=142464 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108644.516:17794): pid=142464 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142476 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108644.555:17795): pid=142464 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142475 suid=0 rport=58722 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108644.555:17796): pid=142464 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142475 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108644.557:17797): pid=142464 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108644.557:17798): pid=142464 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108644.558:17799): pid=142464 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108644.558:17800): pid=142464 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108644.558:17801): pid=142464 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142464 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108645.114:17802): pid=142490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142490 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108645.116:17803): pid=142489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142490 suid=74 rport=38828 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108645.116:17804): pid=142489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142490 suid=74 rport=38828 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108645.187:17805): pid=142489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108645.187:17806): pid=142489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108645.221:17807): pid=142489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108645.221:17808): pid=142489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142490 suid=74 rport=38828 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108645.224:17809): pid=142489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108645.224:17810): pid=142489 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=129 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108645.224:17810): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd5093fe80 a2=1 a3=0 items=0 ppid=40636 pid=142489 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=129 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108645.224:17810): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108645.225:17811): pid=142489 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108645.256:17812): pid=142489 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108645.257:17813): pid=142492 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108645.258:17814): pid=142492 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108645.301:17815): pid=142489 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108645.301:17816): pid=142489 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108645.303:17817): pid=142489 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108645.343:17818): pid=142489 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108645.343:17819): pid=142489 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108645.343:17820): pid=142489 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142492 suid=0 rport=38828 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108645.344:17821): pid=142489 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108645.346:17822): pid=142489 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108645.346:17823): pid=142489 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108645.347:17824): pid=142489 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142489 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108645.867:17825): pid=142515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108645.869:17826): pid=142514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142515 suid=74 rport=38834 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108645.869:17827): pid=142514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142515 suid=74 rport=38834 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108645.940:17828): pid=142514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108645.940:17829): pid=142514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108645.968:17830): pid=142514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108645.969:17831): pid=142514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142515 suid=74 rport=38834 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108645.971:17832): pid=142514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108645.971:17833): pid=142514 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=130 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108645.971:17833): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff1cfaf810 a2=1 a3=0 items=0 ppid=40636 pid=142514 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=130 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108645.971:17833): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108645.973:17834): pid=142514 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108646.010:17835): pid=142514 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108646.012:17836): pid=142517 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142517 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108646.013:17837): pid=142517 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108646.055:17838): pid=142514 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108646.055:17839): pid=142514 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108646.057:17840): pid=142514 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108646.095:17841): pid=142514 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142517 suid=0 rport=38834 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108646.095:17842): pid=142514 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142517 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108646.097:17843): pid=142514 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108646.098:17844): pid=142514 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108646.098:17845): pid=142514 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108646.098:17846): pid=142514 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108646.099:17847): pid=142514 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108646.603:17848): pid=142540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142540 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108646.605:17849): pid=142539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142540 suid=74 rport=38838 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108646.605:17850): pid=142539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142540 suid=74 rport=38838 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108646.680:17851): pid=142539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108646.680:17852): pid=142539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108646.708:17853): pid=142539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108646.708:17854): pid=142539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142540 suid=74 rport=38838 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108646.711:17855): pid=142539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108646.711:17856): pid=142539 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=131 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108646.711:17856): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffed1be9e90 a2=1 a3=0 items=0 ppid=40636 pid=142539 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=131 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108646.711:17856): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108646.713:17857): pid=142539 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108646.748:17858): pid=142539 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108646.750:17859): pid=142567 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108646.751:17860): pid=142567 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108646.793:17861): pid=142539 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108646.793:17862): pid=142539 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108646.795:17863): pid=142539 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142591 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108646.839:17864): pid=142539 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142567 suid=0 rport=38838 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108646.840:17865): pid=142539 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108646.842:17866): pid=142539 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108646.843:17867): pid=142539 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108646.844:17868): pid=142539 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108646.844:17869): pid=142539 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108646.844:17870): pid=142539 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108646.877:17871): pid=141846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141847 suid=74 rport=45032 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108646.878:17872): pid=141846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141847 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108646.878:17873): pid=141846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108646.879:17874): pid=141846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=141846 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108646.879:17875): pid=141846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108647.363:17876): pid=142610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142610 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108647.364:17877): pid=142609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142610 suid=74 rport=38840 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108647.364:17878): pid=142609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142610 suid=74 rport=38840 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108647.440:17879): pid=142609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108647.440:17880): pid=142609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108647.468:17881): pid=142609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108647.468:17882): pid=142609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142610 suid=74 rport=38840 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108647.471:17883): pid=142609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108647.471:17884): pid=142609 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=132 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108647.471:17884): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdee910f90 a2=1 a3=0 items=0 ppid=40636 pid=142609 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=132 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108647.471:17884): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108647.473:17885): pid=142609 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108647.500:17886): pid=142609 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108647.502:17887): pid=142612 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142612 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108647.502:17888): pid=142612 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108647.545:17889): pid=142609 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108647.545:17890): pid=142609 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108647.547:17891): pid=142609 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142620 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108647.589:17892): pid=142609 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142612 suid=0 rport=38840 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108647.589:17893): pid=142609 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142612 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108647.591:17894): pid=142609 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108647.592:17895): pid=142609 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108647.592:17896): pid=142609 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108647.592:17897): pid=142609 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108647.592:17898): pid=142609 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142609 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108648.127:17899): pid=142635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142635 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108648.129:17900): pid=142634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142635 suid=74 rport=38848 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108648.129:17901): pid=142634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142635 suid=74 rport=38848 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108648.205:17902): pid=142634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108648.205:17903): pid=142634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108648.232:17904): pid=142634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108648.232:17905): pid=142634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142635 suid=74 rport=38848 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108648.234:17906): pid=142634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108648.234:17907): pid=142634 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=133 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108648.234:17907): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd944ef940 a2=1 a3=0 items=0 ppid=40636 pid=142634 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=133 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108648.234:17907): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108648.236:17908): pid=142634 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108648.267:17909): pid=142634 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108648.269:17910): pid=142639 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108648.270:17911): pid=142639 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108648.312:17912): pid=142634 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108648.312:17913): pid=142634 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108648.322:17914): pid=142634 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142652 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108648.372:17915): pid=142634 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142639 suid=0 rport=38848 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108648.374:17916): pid=142634 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108648.376:17917): pid=142634 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108648.377:17918): pid=142634 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108648.377:17919): pid=142634 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108648.377:17920): pid=142634 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108648.378:17921): pid=142634 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142634 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108648.889:17922): pid=142783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142783 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108648.891:17923): pid=142782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142783 suid=74 rport=38860 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108648.891:17924): pid=142782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142783 suid=74 rport=38860 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108648.975:17925): pid=142782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108648.975:17926): pid=142782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108648.995:17927): pid=142782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108648.996:17928): pid=142782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142783 suid=74 rport=38860 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108648.999:17929): pid=142782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108649.000:17930): pid=142782 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=134 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108649.000:17930): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd3c9995b0 a2=1 a3=0 items=0 ppid=40636 pid=142782 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=134 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108649.000:17930): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108649.001:17931): pid=142782 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108649.034:17932): pid=142782 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108649.035:17933): pid=142785 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142785 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108649.037:17934): pid=142785 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108649.079:17935): pid=142782 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108649.079:17936): pid=142782 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108649.081:17937): pid=142782 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142786 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108649.124:17938): pid=142782 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108649.124:17939): pid=142782 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108649.124:17940): pid=142782 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142785 suid=0 rport=38860 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108649.124:17941): pid=142782 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142785 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108649.127:17942): pid=142782 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108649.127:17943): pid=142782 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108649.128:17944): pid=142782 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142782 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108649.136:17945): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23962 suid=1000 rport=41630 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1770108649.143:17946): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1770108649.143:17947): pid=23959 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1770108649.662:17948): pid=142890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142890 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108649.663:17949): pid=142889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142890 suid=74 rport=38866 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108649.663:17950): pid=142889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142890 suid=74 rport=38866 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108649.748:17951): pid=142889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108649.748:17952): pid=142889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108649.775:17953): pid=142889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108649.775:17954): pid=142889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142890 suid=74 rport=38866 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108649.778:17955): pid=142889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108649.778:17956): pid=142889 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=135 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108649.778:17956): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcca989e10 a2=1 a3=0 items=0 ppid=40636 pid=142889 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=135 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108649.778:17956): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108649.779:17957): pid=142889 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108649.803:17958): pid=142889 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108649.805:17959): pid=142892 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108649.806:17960): pid=142892 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108649.848:17961): pid=142889 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108649.848:17962): pid=142889 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108649.850:17963): pid=142889 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142893 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108649.895:17964): pid=142889 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142892 suid=0 rport=38866 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108649.896:17965): pid=142889 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108649.898:17966): pid=142889 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108649.899:17967): pid=142889 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108649.900:17968): pid=142889 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108649.900:17969): pid=142889 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108649.900:17970): pid=142889 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142889 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108650.448:17971): pid=142907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108650.449:17972): pid=142906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142907 suid=74 rport=38870 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108650.449:17973): pid=142906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142907 suid=74 rport=38870 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108650.522:17974): pid=142906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108650.522:17975): pid=142906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108650.548:17976): pid=142906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108650.549:17977): pid=142906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142907 suid=74 rport=38870 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108650.551:17978): pid=142906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108650.551:17979): pid=142906 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=136 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108650.551:17979): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffef560b590 a2=1 a3=0 items=0 ppid=40636 pid=142906 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=136 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108650.551:17979): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108650.553:17980): pid=142906 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108650.586:17981): pid=142906 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108650.588:17982): pid=142909 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142909 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108650.588:17983): pid=142909 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108650.631:17984): pid=142906 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108650.631:17985): pid=142906 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108650.633:17986): pid=142906 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108650.678:17987): pid=142906 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142909 suid=0 rport=38870 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108650.678:17988): pid=142906 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142909 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108650.681:17989): pid=142906 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108650.681:17990): pid=142906 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108650.682:17991): pid=142906 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108650.682:17992): pid=142906 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108650.682:17993): pid=142906 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108651.241:17994): pid=142981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108651.242:17995): pid=142980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142981 suid=74 rport=38882 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108651.242:17996): pid=142980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=142981 suid=74 rport=38882 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108651.319:17997): pid=142980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108651.319:17998): pid=142980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108651.346:17999): pid=142980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108651.346:18000): pid=142980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142981 suid=74 rport=38882 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108651.349:18001): pid=142980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108651.349:18002): pid=142980 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=137 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108651.349:18002): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc2f26b6e0 a2=1 a3=0 items=0 ppid=40636 pid=142980 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=137 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108651.349:18002): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108651.351:18003): pid=142980 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108651.385:18004): pid=142980 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108651.387:18005): pid=142984 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142984 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108651.388:18006): pid=142984 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108651.430:18007): pid=142980 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108651.430:18008): pid=142980 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108651.432:18009): pid=142980 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142988 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108651.478:18010): pid=142980 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108651.478:18011): pid=142980 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108651.479:18012): pid=142980 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142984 suid=0 rport=38882 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108651.480:18013): pid=142980 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142984 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108651.483:18014): pid=142980 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108651.483:18015): pid=142980 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108651.484:18016): pid=142980 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=142980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108652.010:18017): pid=143067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143067 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108652.011:18018): pid=143066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143067 suid=74 rport=38896 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108652.011:18019): pid=143066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143067 suid=74 rport=38896 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108652.086:18020): pid=143066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108652.086:18021): pid=143066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108652.112:18022): pid=143066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108652.113:18023): pid=143066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143067 suid=74 rport=38896 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108652.116:18024): pid=143066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108652.116:18025): pid=143066 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=138 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108652.116:18025): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffedbf8c250 a2=1 a3=0 items=0 ppid=40636 pid=143066 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=138 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108652.116:18025): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108652.117:18026): pid=143066 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108652.148:18027): pid=143066 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108652.149:18028): pid=143069 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108652.150:18029): pid=143069 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108652.192:18030): pid=143066 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108652.192:18031): pid=143066 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108652.193:18032): pid=143066 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108652.232:18033): pid=143066 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143069 suid=0 rport=38896 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108652.233:18034): pid=143066 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108652.235:18035): pid=143066 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108652.235:18036): pid=143066 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108652.236:18037): pid=143066 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108652.236:18038): pid=143066 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108652.236:18039): pid=143066 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108652.786:18040): pid=143148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108652.788:18041): pid=143147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143148 suid=74 rport=38906 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108652.788:18042): pid=143147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143148 suid=74 rport=38906 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108652.859:18043): pid=143147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108652.859:18044): pid=143147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108652.874:18045): pid=143147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108652.874:18046): pid=143147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143148 suid=74 rport=38906 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108652.876:18047): pid=143147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108652.876:18048): pid=143147 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=139 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108652.876:18048): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd49ea1f50 a2=1 a3=0 items=0 ppid=40636 pid=143147 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=139 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108652.876:18048): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108652.878:18049): pid=143147 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108652.900:18050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108652.904:18051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770108652.923:18052): pid=143147 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108652.924:18053): pid=143166 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108652.925:18054): pid=143166 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108652.967:18055): pid=143147 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108652.967:18056): pid=143147 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108652.968:18057): pid=143147 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108653.020:18058): pid=143147 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143166 suid=0 rport=38906 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108653.020:18059): pid=143147 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108653.023:18060): pid=143147 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108653.023:18061): pid=143147 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108653.024:18062): pid=143147 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108653.025:18063): pid=143147 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108653.025:18064): pid=143147 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143147 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1770108653.068:18065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108653.082:18066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108653.559:18067): pid=143216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143216 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108653.560:18068): pid=143214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143216 suid=74 rport=38908 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108653.560:18069): pid=143214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143216 suid=74 rport=38908 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108653.634:18070): pid=143214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108653.634:18071): pid=143214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108653.662:18072): pid=143214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108653.663:18073): pid=143214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143216 suid=74 rport=38908 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108653.666:18074): pid=143214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108653.666:18075): pid=143214 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=140 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108653.666:18075): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe268d50e0 a2=1 a3=0 items=0 ppid=40636 pid=143214 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=140 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108653.666:18075): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108653.669:18076): pid=143214 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108653.708:18077): pid=143214 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108653.710:18078): pid=143225 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143225 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108653.711:18079): pid=143225 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108653.753:18080): pid=143214 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108653.753:18081): pid=143214 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108653.756:18082): pid=143214 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143227 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108653.807:18083): pid=143214 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143225 suid=0 rport=38908 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108653.808:18084): pid=143214 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143225 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108653.811:18085): pid=143214 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108653.811:18086): pid=143214 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108653.812:18087): pid=143214 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108653.812:18088): pid=143214 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108653.812:18089): pid=143214 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143214 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108654.311:18090): pid=143241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143241 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108654.313:18091): pid=143240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143241 suid=74 rport=38910 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108654.313:18092): pid=143240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143241 suid=74 rport=38910 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108654.385:18093): pid=143240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108654.385:18094): pid=143240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108654.412:18095): pid=143240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108654.412:18096): pid=143240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143241 suid=74 rport=38910 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108654.415:18097): pid=143240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108654.415:18098): pid=143240 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=141 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108654.415:18098): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff8d8d15d0 a2=1 a3=0 items=0 ppid=40636 pid=143240 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=141 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108654.415:18098): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108654.417:18099): pid=143240 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108654.449:18100): pid=143240 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108654.451:18101): pid=143243 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108654.452:18102): pid=143243 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108654.494:18103): pid=143240 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108654.494:18104): pid=143240 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108654.496:18105): pid=143240 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108654.534:18106): pid=143240 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143243 suid=0 rport=38910 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108654.535:18107): pid=143240 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108654.537:18108): pid=143240 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108654.538:18109): pid=143240 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108654.538:18110): pid=143240 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108654.538:18111): pid=143240 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108654.538:18112): pid=143240 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143240 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108655.081:18113): pid=143266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143266 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108655.082:18114): pid=143265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143266 suid=74 rport=40704 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108655.083:18115): pid=143265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143266 suid=74 rport=40704 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108655.154:18116): pid=143265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108655.154:18117): pid=143265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108655.183:18118): pid=143265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108655.183:18119): pid=143265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143266 suid=74 rport=40704 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108655.185:18120): pid=143265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108655.185:18121): pid=143265 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=142 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108655.185:18121): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffec9bfab60 a2=1 a3=0 items=0 ppid=40636 pid=143265 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=142 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108655.185:18121): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108655.187:18122): pid=143265 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108655.222:18123): pid=143265 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108655.223:18124): pid=143268 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143268 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108655.224:18125): pid=143268 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108655.267:18126): pid=143265 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108655.267:18127): pid=143265 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108655.269:18128): pid=143265 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108655.314:18129): pid=143265 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143268 suid=0 rport=40704 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108655.315:18130): pid=143265 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143268 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108655.317:18131): pid=143265 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108655.318:18132): pid=143265 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108655.318:18133): pid=143265 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108655.318:18134): pid=143265 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108655.318:18135): pid=143265 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143265 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108656.447:18136): pid=143291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143291 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108656.448:18137): pid=143290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143291 suid=74 rport=40710 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108656.448:18138): pid=143290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143291 suid=74 rport=40710 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108656.519:18139): pid=143290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108656.519:18140): pid=143290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108656.545:18141): pid=143290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108656.545:18142): pid=143290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143291 suid=74 rport=40710 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108656.548:18143): pid=143290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108656.548:18144): pid=143290 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=143 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108656.548:18144): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc9a600d90 a2=1 a3=0 items=0 ppid=40636 pid=143290 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=143 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108656.548:18144): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108656.549:18145): pid=143290 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108656.564:18146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108656.567:18147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770108656.587:18148): pid=143290 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108656.589:18149): pid=143305 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108656.590:18150): pid=143305 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108656.632:18151): pid=143290 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108656.632:18152): pid=143290 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108656.634:18153): pid=143290 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143317 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108656.685:18154): pid=143290 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143305 suid=0 rport=40710 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108656.685:18155): pid=143290 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108656.688:18156): pid=143290 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108656.689:18157): pid=143290 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108656.689:18158): pid=143290 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108656.689:18159): pid=143290 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108656.689:18160): pid=143290 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143290 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1770108656.858:18161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108656.929:18162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108657.201:18163): pid=143416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143416 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108657.202:18164): pid=143415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143416 suid=74 rport=40714 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108657.203:18165): pid=143415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143416 suid=74 rport=40714 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108657.275:18166): pid=143415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108657.275:18167): pid=143415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108657.303:18168): pid=143415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108657.303:18169): pid=143415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143416 suid=74 rport=40714 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108657.306:18170): pid=143415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108657.306:18171): pid=143415 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=144 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108657.306:18171): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe26ebe460 a2=1 a3=0 items=0 ppid=40636 pid=143415 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=144 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108657.306:18171): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108657.308:18172): pid=143415 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108657.339:18173): pid=143415 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108657.341:18174): pid=143418 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143418 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108657.342:18175): pid=143418 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108657.386:18176): pid=143415 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108657.386:18177): pid=143415 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108657.391:18178): pid=143415 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143419 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1770108657.451:18179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1770108657.457:18180): pid=143415 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108657.458:18181): pid=143415 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108657.458:18182): pid=143415 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143418 suid=0 rport=40714 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108657.459:18183): pid=143415 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143418 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108657.462:18184): pid=143415 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108657.463:18185): pid=143415 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108657.464:18186): pid=143415 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108657.986:18187): pid=143464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143464 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108657.988:18188): pid=143463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143464 suid=74 rport=40730 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108657.989:18189): pid=143463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143464 suid=74 rport=40730 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770108658.002:18190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1770108658.059:18191): pid=143463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108658.059:18192): pid=143463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108658.085:18193): pid=143463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108658.086:18194): pid=143463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143464 suid=74 rport=40730 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108658.088:18195): pid=143463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108658.088:18196): pid=143463 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=145 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108658.088:18196): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd9c753ca0 a2=1 a3=0 items=0 ppid=40636 pid=143463 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=145 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108658.088:18196): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108658.090:18197): pid=143463 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108658.124:18198): pid=143463 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108658.126:18199): pid=143466 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143466 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108658.127:18200): pid=143466 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108658.169:18201): pid=143463 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108658.169:18202): pid=143463 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108658.170:18203): pid=143463 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143467 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108658.206:18204): pid=143463 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143466 suid=0 rport=40730 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108658.206:18205): pid=143463 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143466 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108658.208:18206): pid=143463 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108658.209:18207): pid=143463 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108658.209:18208): pid=143463 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108658.209:18209): pid=143463 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108658.210:18210): pid=143463 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108658.753:18211): pid=143604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143604 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108658.754:18212): pid=143603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143604 suid=74 rport=40740 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108658.754:18213): pid=143603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143604 suid=74 rport=40740 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108658.827:18214): pid=143603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108658.827:18215): pid=143603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108658.850:18216): pid=143603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108658.850:18217): pid=143603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143604 suid=74 rport=40740 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108658.853:18218): pid=143603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108658.853:18219): pid=143603 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=146 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108658.853:18219): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff3951fe40 a2=1 a3=0 items=0 ppid=40636 pid=143603 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=146 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108658.853:18219): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108658.855:18220): pid=143603 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108658.881:18221): pid=143603 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108658.883:18222): pid=143614 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108658.884:18223): pid=143614 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108658.926:18224): pid=143603 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108658.926:18225): pid=143603 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108658.929:18226): pid=143603 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108658.977:18227): pid=143603 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143614 suid=0 rport=40740 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108658.977:18228): pid=143603 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108658.980:18229): pid=143603 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108658.980:18230): pid=143603 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108658.981:18231): pid=143603 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108658.981:18232): pid=143603 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108658.981:18233): pid=143603 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1770108659.400:18234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108659.482:18235): pid=143711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143711 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108659.484:18236): pid=143710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143711 suid=74 rport=40752 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108659.484:18237): pid=143710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143711 suid=74 rport=40752 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108659.562:18238): pid=143710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108659.562:18239): pid=143710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108659.589:18240): pid=143710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108659.589:18241): pid=143710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143711 suid=74 rport=40752 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108659.592:18242): pid=143710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108659.592:18243): pid=143710 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=147 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108659.592:18243): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffcfc73230 a2=1 a3=0 items=0 ppid=40636 pid=143710 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=147 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108659.592:18243): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108659.594:18244): pid=143710 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108659.623:18245): pid=143710 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108659.624:18246): pid=143713 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143713 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108659.625:18247): pid=143713 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108659.668:18248): pid=143710 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108659.668:18249): pid=143710 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108659.671:18250): pid=143710 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143714 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108659.711:18251): pid=143710 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143713 suid=0 rport=40752 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108659.711:18252): pid=143710 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143713 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108659.713:18253): pid=143710 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108659.714:18254): pid=143710 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108659.714:18255): pid=143710 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108659.714:18256): pid=143710 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108659.715:18257): pid=143710 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1770108660.143:18258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108660.254:18259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108660.288:18260): pid=143760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143760 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108660.289:18261): pid=143759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143760 suid=74 rport=40764 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108660.289:18262): pid=143759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143760 suid=74 rport=40764 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108660.370:18263): pid=143759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108660.370:18264): pid=143759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108660.397:18265): pid=143759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108660.398:18266): pid=143759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143760 suid=74 rport=40764 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108660.400:18267): pid=143759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108660.401:18268): pid=143759 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=148 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108660.401:18268): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd21914560 a2=1 a3=0 items=0 ppid=40636 pid=143759 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=148 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108660.401:18268): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108660.402:18269): pid=143759 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108660.434:18270): pid=143759 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108660.435:18271): pid=143762 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108660.436:18272): pid=143762 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108660.479:18273): pid=143759 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108660.479:18274): pid=143759 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108660.481:18275): pid=143759 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143763 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108660.529:18276): pid=143759 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108660.530:18277): pid=143759 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108660.530:18278): pid=143759 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143762 suid=0 rport=40764 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108660.531:18279): pid=143759 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108660.533:18280): pid=143759 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108660.534:18281): pid=143759 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108660.535:18282): pid=143759 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143759 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108661.085:18283): pid=143785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143785 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108661.086:18284): pid=143784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143785 suid=74 rport=40768 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108661.086:18285): pid=143784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143785 suid=74 rport=40768 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108661.139:18286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1770108661.153:18287): pid=143784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108661.153:18288): pid=143784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108661.183:18289): pid=143784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108661.184:18290): pid=143784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143785 suid=74 rport=40768 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108661.186:18291): pid=143784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108661.186:18292): pid=143784 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=149 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108661.186:18292): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe3ff46660 a2=1 a3=0 items=0 ppid=40636 pid=143784 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=149 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108661.186:18292): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108661.188:18293): pid=143784 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108661.218:18294): pid=143784 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108661.219:18295): pid=143803 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143803 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108661.220:18296): pid=143803 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108661.262:18297): pid=143784 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108661.262:18298): pid=143784 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108661.264:18299): pid=143784 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143817 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108661.309:18300): pid=143784 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143803 suid=0 rport=40768 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108661.310:18301): pid=143784 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143803 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108661.313:18302): pid=143784 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108661.313:18303): pid=143784 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108661.313:18304): pid=143784 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108661.314:18305): pid=143784 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108661.314:18306): pid=143784 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143784 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1770108661.445:18307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108661.860:18308): pid=143831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143831 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108661.861:18309): pid=143830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143831 suid=74 rport=40780 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108661.861:18310): pid=143830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143831 suid=74 rport=40780 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108661.934:18311): pid=143830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108661.934:18312): pid=143830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108661.954:18313): pid=143830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108661.954:18314): pid=143830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143831 suid=74 rport=40780 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108661.956:18315): pid=143830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108661.956:18316): pid=143830 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=150 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108661.956:18316): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdee99f930 a2=1 a3=0 items=0 ppid=40636 pid=143830 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=150 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108661.956:18316): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108661.958:18317): pid=143830 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108661.989:18318): pid=143830 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108661.991:18319): pid=143841 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143841 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108661.991:18320): pid=143841 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108662.035:18321): pid=143830 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108662.035:18322): pid=143830 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108662.037:18323): pid=143830 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143842 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108662.072:18324): pid=143830 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143841 suid=0 rport=40780 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108662.073:18325): pid=143830 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143841 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108662.075:18326): pid=143830 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108662.075:18327): pid=143830 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108662.076:18328): pid=143830 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108662.076:18329): pid=143830 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108662.076:18330): pid=143830 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143830 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108662.590:18331): pid=143856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143856 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108662.591:18332): pid=143855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143856 suid=74 rport=40784 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108662.592:18333): pid=143855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143856 suid=74 rport=40784 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108662.663:18334): pid=143855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108662.663:18335): pid=143855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108662.689:18336): pid=143855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108662.690:18337): pid=143855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143856 suid=74 rport=40784 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108662.692:18338): pid=143855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108662.692:18339): pid=143855 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=151 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108662.692:18339): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc7bafcdb0 a2=1 a3=0 items=0 ppid=40636 pid=143855 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=151 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108662.692:18339): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108662.693:18340): pid=143855 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108662.727:18341): pid=143855 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108662.728:18342): pid=143858 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108662.729:18343): pid=143858 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108662.771:18344): pid=143855 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108662.771:18345): pid=143855 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108662.772:18346): pid=143855 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143859 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108662.807:18347): pid=143855 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143858 suid=0 rport=40784 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108662.809:18348): pid=143855 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108662.811:18349): pid=143855 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108662.811:18350): pid=143855 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108662.812:18351): pid=143855 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108662.812:18352): pid=143855 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108662.812:18353): pid=143855 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143855 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108663.350:18354): pid=143883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143883 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108663.351:18355): pid=143882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143883 suid=74 rport=40794 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108663.352:18356): pid=143882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143883 suid=74 rport=40794 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108663.429:18357): pid=143882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108663.429:18358): pid=143882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108663.458:18359): pid=143882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108663.458:18360): pid=143882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143883 suid=74 rport=40794 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108663.461:18361): pid=143886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143886 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRED_ACQ msg=audit(1770108663.461:18362): pid=143882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108663.461:18363): pid=143882 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=152 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108663.461:18363): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc606bd530 a2=1 a3=0 items=0 ppid=40636 pid=143882 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=152 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108663.461:18363): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108663.463:18364): pid=143882 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108663.499:18365): pid=143882 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108663.500:18366): pid=143887 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143887 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108663.501:18367): pid=143887 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108663.543:18368): pid=143882 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108663.543:18369): pid=143882 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108663.544:18370): pid=143882 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108663.589:18371): pid=143882 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108663.589:18372): pid=143882 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108663.589:18373): pid=143882 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143887 suid=0 rport=40794 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108663.590:18374): pid=143882 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143887 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108663.592:18375): pid=143882 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108663.593:18376): pid=143882 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108663.593:18377): pid=143882 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108664.092:18378): pid=143959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108664.093:18379): pid=143958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143959 suid=74 rport=40796 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108664.093:18380): pid=143958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=143959 suid=74 rport=40796 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108664.167:18381): pid=143958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108664.167:18382): pid=143958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108664.194:18383): pid=143958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108664.194:18384): pid=143958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143959 suid=74 rport=40796 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108664.196:18385): pid=143958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108664.197:18386): pid=143958 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=153 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108664.197:18386): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff49f22210 a2=1 a3=0 items=0 ppid=40636 pid=143958 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=153 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108664.197:18386): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108664.198:18387): pid=143958 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108664.226:18388): pid=143958 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108664.227:18389): pid=143961 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108664.228:18390): pid=143961 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108664.270:18391): pid=143958 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108664.270:18392): pid=143958 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108664.272:18393): pid=143958 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108664.310:18394): pid=143958 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108664.311:18395): pid=143958 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108664.311:18396): pid=143958 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143961 suid=0 rport=40796 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108664.311:18397): pid=143958 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108664.314:18398): pid=143958 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108664.314:18399): pid=143958 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108664.315:18400): pid=143958 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143958 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108664.838:18401): pid=144009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=144009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108664.840:18402): pid=144008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=144009 suid=74 rport=40804 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108664.840:18403): pid=144008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=144009 suid=74 rport=40804 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108664.911:18404): pid=144008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108664.911:18405): pid=144008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108664.932:18406): pid=144008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108664.933:18407): pid=144008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=144009 suid=74 rport=40804 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108664.936:18408): pid=144008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108664.936:18409): pid=144008 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=154 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108664.936:18409): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc2b3f6030 a2=1 a3=0 items=0 ppid=40636 pid=144008 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=154 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108664.936:18409): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108664.937:18410): pid=144008 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108664.961:18411): pid=144008 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108664.962:18412): pid=144039 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=144039 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108664.963:18413): pid=144039 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108665.005:18414): pid=144008 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108665.005:18415): pid=144008 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108665.007:18416): pid=144008 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=144048 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108665.050:18417): pid=144008 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=144039 suid=0 rport=40804 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108665.051:18418): pid=144008 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=144039 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108665.053:18419): pid=144008 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108665.053:18420): pid=144008 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108665.054:18421): pid=144008 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108665.054:18422): pid=144008 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108665.054:18423): pid=144008 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=144008 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108665.586:18424): pid=144118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=144118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108665.588:18425): pid=144117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=144118 suid=74 rport=49110 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108665.588:18426): pid=144117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=144118 suid=74 rport=49110 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108665.595:18427): pid=143885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=143886 suid=74 rport=46438 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108665.595:18428): pid=143885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=143886 suid=74 rport=46438 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108665.665:18429): pid=144117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108665.665:18430): pid=144117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108665.684:18431): pid=144117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108665.684:18432): pid=144117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=144118 suid=74 rport=49110 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108665.686:18433): pid=144117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108665.686:18434): pid=144117 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=155 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108665.686:18434): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd5fda8490 a2=1 a3=0 items=0 ppid=40636 pid=144117 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=155 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108665.686:18434): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108665.687:18435): pid=144117 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108665.711:18436): pid=144117 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108665.712:18437): pid=144120 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=144120 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108665.713:18438): pid=144120 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108665.755:18439): pid=144117 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108665.755:18440): pid=144117 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108665.756:18441): pid=144117 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=144121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108665.784:18442): pid=144117 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=144120 suid=0 rport=49110 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108665.785:18443): pid=144117 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=144120 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108665.786:18444): pid=144117 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108665.787:18445): pid=144117 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108665.787:18446): pid=144117 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108665.787:18447): pid=144117 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108665.787:18448): pid=144117 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=144117 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1770108667.144:18449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108667.348:18450): pid=143885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143886 suid=74 rport=46438 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108667.349:18451): pid=143885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143886 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108667.350:18452): pid=143885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108667.350:18453): pid=143885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=143885 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108667.350:18454): pid=143885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108667.355:18455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108671.011:18456): pid=144483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=144483 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108672.437:18457): pid=144482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=144483 suid=74 rport=50824 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108672.437:18458): pid=144482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=144483 suid=74 rport=50824 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108673.442:18459): pid=144511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=144511 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108673.704:18460): pid=144510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=144511 suid=74 rport=51130 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108673.704:18461): pid=144510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=144511 suid=74 rport=51130 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108674.156:18462): pid=144482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=144483 suid=74 rport=50824 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108674.157:18463): pid=144482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=144483 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108674.157:18464): pid=144482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108674.158:18465): pid=144482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=144482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108674.158:18466): pid=144482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108675.839:18467): pid=144510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=144511 suid=74 rport=51130 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108675.839:18468): pid=144510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=144511 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108675.840:18469): pid=144510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108675.840:18470): pid=144510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=144510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108675.840:18471): pid=144510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRED_DISP msg=audit(1770108675.896:18472): pid=138459 uid=0 auid=0 ses=71 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1770108675.897:18473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108675.924:18474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108681.322:18475): pid=145005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=145005 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1770108683.146:18476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108683.150:18477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770108683.315:18478): pid=145004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=145005 suid=74 rport=55226 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108683.315:18479): pid=145004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=145005 suid=74 rport=55226 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770108683.319:18480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108683.337:18481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108685.363:18482): pid=145004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=145005 suid=74 rport=55226 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108685.364:18483): pid=145004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=145005 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108685.365:18484): pid=145004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108685.365:18485): pid=145004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=145004 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108685.365:18486): pid=145004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108687.150:18487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108687.154:18488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108687.337:18489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108687.374:18490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108688.145:18491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108688.660:18492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108691.149:18493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108691.193:18494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108691.193:18495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108691.303:18496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108692.147:18497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108692.522:18498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108695.435:18499): pid=145756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=145756 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108695.699:18500): pid=145755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=145756 suid=74 rport=46354 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108695.699:18501): pid=145755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=145756 suid=74 rport=46354 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108697.379:18502): pid=145755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=145756 suid=74 rport=46354 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108697.380:18503): pid=145755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=145756 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108697.380:18504): pid=145755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108697.381:18505): pid=145755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=145755 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108697.381:18506): pid=145755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108697.403:18507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108697.593:18508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108709.247:18509): pid=146629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=146629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108709.610:18510): pid=146628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=146629 suid=74 rport=56904 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108709.610:18511): pid=146628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=146629 suid=74 rport=56904 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108711.842:18512): pid=146628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=146629 suid=74 rport=56904 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108711.842:18513): pid=146628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=146629 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108711.843:18514): pid=146628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108711.843:18515): pid=146628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=146628 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108711.843:18516): pid=146628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108714.143:18517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108714.146:18518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108714.306:18519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108714.330:18520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108718.143:18521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108718.146:18522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108718.331:18523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108718.374:18524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108718.775:18525): pid=147096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=147096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108718.817:18526): pid=147086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=147096 suid=74 rport=35694 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108718.817:18527): pid=147086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=147096 suid=74 rport=35694 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108719.140:18528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108719.630:18529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108720.307:18530): pid=147086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=147096 suid=74 rport=35694 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108720.308:18531): pid=147086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=147096 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108720.309:18532): pid=147086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108720.309:18533): pid=147086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=147086 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108720.309:18534): pid=147086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108722.141:18535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108722.282:18536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108723.152:18537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108723.474:18538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108728.140:18539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108728.319:18540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108745.145:18541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108745.149:18542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108745.289:18543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108745.320:18544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108749.151:18545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108749.154:18546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108749.299:18547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108749.434:18548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108750.140:18549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108750.657:18550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108752.933:18551): pid=148926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=148926 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108752.935:18552): pid=148925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=148926 suid=74 rport=35308 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108752.935:18553): pid=148925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=148926 suid=74 rport=35308 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108753.010:18554): pid=148925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108753.010:18555): pid=148925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108753.037:18556): pid=148925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108753.038:18557): pid=148925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=148926 suid=74 rport=35308 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108753.040:18558): pid=148925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108753.041:18559): pid=148925 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=156 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108753.041:18559): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffef40d3820 a2=1 a3=0 items=0 ppid=40636 pid=148925 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=156 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108753.041:18559): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108753.042:18560): pid=148925 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1770108753.070:18561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108753.099:18562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108753.141:18563): pid=148938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1770108753.141:18564): pid=148938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1770108753.142:18565): pid=148938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108753.143:18566): pid=148938 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=157 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108753.143:18566): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd711b5940 a2=1 a3=0 items=0 ppid=1 pid=148938 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=157 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108753.143:18566): proctitle="(systemd)" type=USER_START msg=audit(1770108753.146:18567): pid=148938 uid=0 auid=0 ses=157 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1770108753.171:18568): prog-id=1030 op=LOAD type=SYSCALL msg=audit(1770108753.171:18568): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc2900aba0 a2=90 a3=0 items=0 ppid=1 pid=148938 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=157 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108753.171:18568): proctitle="(systemd)" type=BPF msg=audit(1770108753.172:18569): prog-id=0 op=UNLOAD type=BPF msg=audit(1770108753.172:18570): prog-id=1031 op=LOAD type=SYSCALL msg=audit(1770108753.172:18570): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc2900ac40 a2=90 a3=4 items=0 ppid=1 pid=148938 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=157 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108753.172:18570): proctitle="(systemd)" type=BPF msg=audit(1770108753.172:18571): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1770108753.226:18572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108753.314:18573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770108753.338:18574): pid=148925 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108753.340:18575): pid=148970 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=148970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108753.341:18576): pid=148970 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108753.384:18577): pid=148925 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108753.384:18578): pid=148925 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108753.385:18579): pid=148925 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=148973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108753.447:18580): pid=148986 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108753.448:18581): pid=148986 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F766E5F636C75737465725F6E6F727468642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108753.448:18582): pid=148986 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108753.453:18583): pid=148986 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108753.467:18584): pid=148986 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108753.468:18585): pid=148986 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108753.471:18586): pid=148925 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=148970 suid=0 rport=35308 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108753.472:18587): pid=148925 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=148970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108753.475:18588): pid=148925 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108753.475:18589): pid=148925 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108753.476:18590): pid=148925 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108753.476:18591): pid=148925 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108753.476:18592): pid=148925 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=148925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1770108753.500:18593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108753.835:18594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108754.947:18595): pid=149119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108754.949:18596): pid=149118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=149119 suid=74 rport=35312 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108754.949:18597): pid=149118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=149119 suid=74 rport=35312 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108755.023:18598): pid=149118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108755.023:18599): pid=149118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108755.050:18600): pid=149118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108755.050:18601): pid=149118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=149119 suid=74 rport=35312 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108755.054:18602): pid=149118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108755.054:18603): pid=149118 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=158 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108755.054:18603): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffeb4cf4a60 a2=1 a3=0 items=0 ppid=40636 pid=149118 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=158 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108755.054:18603): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108755.058:18604): pid=149118 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108755.113:18605): pid=149118 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108755.115:18606): pid=149121 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108755.116:18607): pid=149121 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108755.160:18608): pid=149118 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108755.160:18609): pid=149118 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108755.164:18610): pid=149118 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108755.235:18611): pid=149122 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108755.236:18612): pid=149122 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=6E6674206164642072756C6520696E65742066696C74657220494E505554206970207361646472203137322E31372E312E302F3234207463702064706F72742036363431206374207374617465206E657720636F756E74657220616363657074 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108755.236:18613): pid=149122 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108755.242:18614): pid=149122 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=NETFILTER_CFG msg=audit(1770108755.255:18615): table=filter:5 family=1 entries=1 op=nft_register_rule pid=149136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=SYSCALL msg=audit(1770108755.255:18615): arch=c000003e syscall=46 success=yes exit=652 a0=3 a1=7ffc84417b60 a2=0 a3=7fa40f130bc4 items=0 ppid=149122 pid=149136 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=158 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108755.255:18615): proctitle=6E6674006164640072756C6500696E65740066696C74657200494E505554006970007361646472003137322E31372E312E302F3234007463700064706F72740036363431006374007374617465006E657700636F756E74657200616363657074 type=USER_END msg=audit(1770108755.257:18616): pid=149122 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108755.258:18617): pid=149122 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108755.261:18618): pid=149118 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=149121 suid=0 rport=35312 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108755.262:18619): pid=149118 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108755.264:18620): pid=149118 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108755.265:18621): pid=149118 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108755.266:18622): pid=149118 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108755.266:18623): pid=149118 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108755.266:18624): pid=149118 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108755.288:18625): pid=149138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108755.289:18626): pid=149137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=149138 suid=74 rport=56034 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108755.289:18627): pid=149137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=149138 suid=74 rport=56034 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108755.362:18628): pid=149137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108755.362:18629): pid=149137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108755.383:18630): pid=149137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108755.383:18631): pid=149137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=149138 suid=74 rport=56034 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108755.386:18632): pid=149137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108755.386:18633): pid=149137 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=159 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108755.386:18633): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdf98f2830 a2=1 a3=0 items=0 ppid=40636 pid=149137 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=159 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108755.386:18633): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108755.388:18634): pid=149137 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108755.417:18635): pid=149137 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108755.419:18636): pid=149144 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149144 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108755.420:18637): pid=149144 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108755.462:18638): pid=149137 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108755.462:18639): pid=149137 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108755.464:18640): pid=149137 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108755.525:18641): pid=149148 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108755.525:18642): pid=149148 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=6E6674206164642072756C6520696E65742066696C74657220494E505554206970207361646472203137322E31372E312E302F3234207463702064706F72742036363432206374207374617465206E657720636F756E74657220616363657074 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108755.526:18643): pid=149148 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108755.530:18644): pid=149148 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=NETFILTER_CFG msg=audit(1770108755.539:18645): table=filter:6 family=1 entries=1 op=nft_register_rule pid=149171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=SYSCALL msg=audit(1770108755.539:18645): arch=c000003e syscall=46 success=yes exit=652 a0=3 a1=7fff29ed2d80 a2=0 a3=7f396344cbc4 items=0 ppid=149148 pid=149171 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=159 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108755.539:18645): proctitle=6E6674006164640072756C6500696E65740066696C74657200494E505554006970007361646472003137322E31372E312E302F3234007463700064706F72740036363432006374007374617465006E657700636F756E74657200616363657074 type=USER_END msg=audit(1770108755.541:18646): pid=149148 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108755.541:18647): pid=149148 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108755.544:18648): pid=149137 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=149144 suid=0 rport=56034 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108755.545:18649): pid=149137 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149144 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108755.547:18650): pid=149137 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108755.548:18651): pid=149137 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108755.548:18652): pid=149137 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108755.548:18653): pid=149137 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108755.548:18654): pid=149137 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149137 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1770108759.180:18655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108759.361:18656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108761.128:18657): pid=149732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108761.130:18658): pid=149731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=149732 suid=74 rport=56040 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108761.130:18659): pid=149731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=149732 suid=74 rport=56040 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108761.202:18660): pid=149731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108761.202:18661): pid=149731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108761.223:18662): pid=149731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108761.223:18663): pid=149731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=149732 suid=74 rport=56040 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108761.226:18664): pid=149731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108761.226:18665): pid=149731 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=160 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108761.226:18665): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff8c1d0270 a2=1 a3=0 items=0 ppid=40636 pid=149731 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=160 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108761.226:18665): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108761.227:18666): pid=149731 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108761.255:18667): pid=149731 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108761.257:18668): pid=149734 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108761.258:18669): pid=149734 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108761.302:18670): pid=149731 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108761.302:18671): pid=149731 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108761.307:18672): pid=149731 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108761.375:18673): pid=149748 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108761.376:18674): pid=149748 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F766E5F636C75737465725F6E6F7274685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108761.377:18675): pid=149748 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108761.382:18676): pid=149748 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108761.396:18677): pid=149748 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108761.397:18678): pid=149748 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108761.400:18679): pid=149731 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=149734 suid=0 rport=56040 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108761.400:18680): pid=149731 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108761.404:18681): pid=149731 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108761.404:18682): pid=149731 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108761.406:18683): pid=149731 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108761.406:18684): pid=149731 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108761.406:18685): pid=149731 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149731 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108762.328:18686): pid=149760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149760 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108762.330:18687): pid=149759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=149760 suid=74 rport=56054 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108762.330:18688): pid=149759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=149760 suid=74 rport=56054 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770108762.402:18689): pid=149759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108762.402:18690): pid=149759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770108762.429:18691): pid=149759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108762.430:18692): pid=149759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=149760 suid=74 rport=56054 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770108762.432:18693): pid=149759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770108762.433:18694): pid=149759 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=161 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1770108762.433:18694): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd61efb440 a2=1 a3=0 items=0 ppid=40636 pid=149759 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=161 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770108762.433:18694): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1770108762.434:18695): pid=149759 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108762.464:18696): pid=149759 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108762.466:18697): pid=149762 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1770108762.467:18698): pid=149762 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1770108762.510:18699): pid=149759 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1770108762.510:18700): pid=149759 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108762.511:18701): pid=149759 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149763 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1770108762.580:18702): pid=149776 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1770108762.580:18703): pid=149776 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F766E5F636C75737465725F736F7574685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1770108762.581:18704): pid=149776 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1770108762.586:18705): pid=149776 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108762.600:18706): pid=149776 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108762.601:18707): pid=149776 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1770108762.604:18708): pid=149759 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=149762 suid=0 rport=56054 laddr=192.168.122.109 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770108762.605:18709): pid=149759 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1770108762.607:18710): pid=149759 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1770108762.608:18711): pid=149759 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1770108762.608:18712): pid=149759 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1770108762.608:18713): pid=149759 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1770108762.608:18714): pid=149759 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=149759 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1770108771.197:18715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108771.197:18716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108772.053:18717): pid=150299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=150299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108772.340:18718): pid=150298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=150299 suid=74 rport=54512 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108772.341:18719): pid=150298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=150299 suid=74 rport=54512 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_DISP msg=audit(1770108772.649:18720): pid=148944 uid=0 auid=0 ses=157 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1770108772.651:18721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108772.717:18722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108773.935:18723): pid=150298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=150299 suid=74 rport=54512 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108773.936:18724): pid=150298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=150299 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108773.937:18725): pid=150298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108773.938:18726): pid=150298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=150298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108773.938:18727): pid=150298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108776.146:18728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108776.149:18729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108776.304:18730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108776.327:18731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108780.146:18732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108780.150:18733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108780.331:18734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108780.345:18735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108781.140:18736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108781.618:18737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108784.140:18738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108784.143:18739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108784.336:18740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108784.516:18741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108790.145:18742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108790.364:18743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108807.150:18744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108807.154:18745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108807.342:18746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108807.369:18747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108810.362:18748): pid=152379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=152379 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1770108811.145:18749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108811.147:18750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108811.331:18751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108811.368:18752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108812.144:18753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108812.609:18754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770108814.161:18755): pid=152360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=152379 suid=74 rport=36796 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108814.162:18756): pid=152360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=152379 suid=74 rport=36796 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108814.499:18757): pid=152559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=152559 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1770108814.761:18758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108814.764:18759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108814.912:18760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108815.025:18761): pid=152360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=152379 suid=74 rport=36796 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108815.026:18762): pid=152360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=152379 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108815.026:18763): pid=152360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108815.027:18764): pid=152360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=152360 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108815.027:18765): pid=152360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108815.113:18766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770108816.419:18767): pid=152558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=152559 suid=74 rport=36828 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108816.419:18768): pid=152558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=152559 suid=74 rport=36828 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108818.016:18769): pid=152558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=152559 suid=74 rport=36828 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108818.016:18770): pid=152558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=152559 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108818.017:18771): pid=152558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108818.017:18772): pid=152558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=152558 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108818.017:18773): pid=152558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108820.175:18774): pid=152850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=152850 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1770108820.402:18775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108820.758:18776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770108821.648:18777): pid=152709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=152850 suid=74 rport=46640 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108821.649:18778): pid=152709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=152850 suid=74 rport=46640 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108825.969:18779): pid=153282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=153282 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108828.120:18780): pid=153281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=153282 suid=74 rport=45948 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108828.120:18781): pid=153281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=153282 suid=74 rport=45948 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108830.872:18782): pid=153281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=153282 suid=74 rport=45948 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108830.872:18783): pid=153281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=153282 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108830.873:18784): pid=153281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108830.874:18785): pid=153281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=153281 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108830.874:18786): pid=153281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108834.994:18787): pid=153730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=153730 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1770108838.146:18788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108838.150:18789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108838.315:18790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108838.327:18791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108841.901:18792): pid=152709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=152850 suid=74 rport=46640 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108841.903:18793): pid=152709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=152850 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108841.903:18794): pid=152709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108841.904:18795): pid=152709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=152709 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108841.904:18796): pid=152709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108841.926:18797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108841.929:18798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108842.076:18799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108842.105:18800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108843.144:18801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108843.627:18802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108845.140:18803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108845.143:18804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108845.333:18805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108845.545:18806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108849.746:18807): pid=154552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=154552 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108850.421:18808): pid=154551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=154552 suid=74 rport=45378 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=170.64.148.49 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108850.422:18809): pid=154551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=154552 suid=74 rport=45378 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=170.64.148.49 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108851.149:18810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108851.319:18811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108853.587:18812): pid=154551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=154552 suid=74 rport=45378 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=170.64.148.49 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108853.588:18813): pid=154551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=154552 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108853.589:18814): pid=154551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=170.64.148.49 addr=170.64.148.49 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108853.589:18815): pid=154551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=154551 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108853.589:18816): pid=154551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=170.64.148.49 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108864.221:18817): pid=155348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=155348 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108864.529:18818): pid=155347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=155348 suid=74 rport=48172 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108864.530:18819): pid=155347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=155348 suid=74 rport=48172 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108869.148:18820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108869.152:18821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108869.337:18822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108869.359:18823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108871.472:18824): pid=155702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=155702 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108871.490:18825): pid=155701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=155702 suid=74 rport=36662 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108871.491:18826): pid=155701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=155702 suid=74 rport=36662 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108871.996:18827): pid=155347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=155348 suid=74 rport=48172 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108871.996:18828): pid=155347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=155348 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108871.997:18829): pid=155347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108871.998:18830): pid=155347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=155347 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108871.998:18831): pid=155347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108872.067:18832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108872.067:18833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108872.140:18834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108872.143:18835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108872.328:18836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108872.352:18837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108872.942:18838): pid=155701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=155702 suid=74 rport=36662 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108872.943:18839): pid=155701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=155702 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108872.943:18840): pid=155701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108872.944:18841): pid=155701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=155701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108872.944:18842): pid=155701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108874.142:18843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108874.612:18844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108876.142:18845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108876.145:18846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108876.318:18847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108876.515:18848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108882.145:18849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108882.327:18850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108892.203:18851): pid=157032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=157032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108892.317:18852): pid=157031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=157032 suid=74 rport=54992 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108892.317:18853): pid=157031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=157032 suid=74 rport=54992 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108893.474:18854): pid=157031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=157032 suid=74 rport=54992 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108893.474:18855): pid=157031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=157032 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108893.475:18856): pid=157031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108893.475:18857): pid=157031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=157031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108893.475:18858): pid=157031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108894.473:18859): pid=157060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=157060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108894.543:18860): pid=157051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=157060 suid=74 rport=37386 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108894.544:18861): pid=157051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=157060 suid=74 rport=37386 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108895.951:18862): pid=157051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=157060 suid=74 rport=37386 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108895.951:18863): pid=157051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=157060 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108895.951:18864): pid=157051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108895.952:18865): pid=157051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=157051 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108895.952:18866): pid=157051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108900.148:18867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108900.153:18868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108900.281:18869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108900.370:18870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108902.141:18871): pid=157591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=157591 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108902.399:18872): pid=157590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=157591 suid=74 rport=60278 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108902.400:18873): pid=157590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=157591 suid=74 rport=60278 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108903.145:18874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108903.148:18875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108903.243:18876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108903.338:18877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108904.848:18878): pid=157590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=157591 suid=74 rport=60278 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108904.849:18879): pid=157590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=157591 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108904.849:18880): pid=157590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108904.850:18881): pid=157590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=157590 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108904.850:18882): pid=157590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108904.862:18883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108905.372:18884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108906.720:18885): pid=157699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=157699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108906.982:18886): pid=157698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=157699 suid=74 rport=38210 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108906.982:18887): pid=157698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=157699 suid=74 rport=38210 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108907.146:18888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108907.150:18889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108907.284:18890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108907.400:18891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108908.226:18892): pid=157698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=157699 suid=74 rport=38210 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108908.227:18893): pid=157698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=157699 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108908.227:18894): pid=157698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108908.228:18895): pid=157698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=157698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108908.228:18896): pid=157698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108913.143:18897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108913.340:18898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108917.123:18899): pid=158312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=158312 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108917.356:18900): pid=158311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=158312 suid=74 rport=60006 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108917.357:18901): pid=158311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=158312 suid=74 rport=60006 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108918.513:18902): pid=158311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=158312 suid=74 rport=60006 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108918.514:18903): pid=158311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=158312 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108918.515:18904): pid=158311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108918.515:18905): pid=158311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=158311 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108918.515:18906): pid=158311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108918.579:18907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108918.579:18908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108931.150:18909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108931.154:18910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108931.344:18911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108931.400:18912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108934.143:18913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108934.148:18914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108934.304:18915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108934.341:18916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108936.146:18917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108936.628:18918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108938.141:18919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108938.143:18920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108938.328:18921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108938.523:18922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108942.273:18923): pid=159929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=159929 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1770108944.140:18924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108944.290:18925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770108945.822:18926): pid=159928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=159929 suid=74 rport=32986 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108945.822:18927): pid=159928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=159929 suid=74 rport=32986 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108947.155:18928): pid=159928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=159929 suid=74 rport=32986 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108947.156:18929): pid=159928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=159929 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108947.156:18930): pid=159928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108947.157:18931): pid=159928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=159928 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108947.157:18932): pid=159928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108962.140:18933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108962.144:18934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108962.247:18935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108962.316:18936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108964.695:18937): pid=160996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=160996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1770108965.150:18938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108965.154:18939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108965.284:18940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108965.328:18941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770108965.715:18942): pid=160995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=160996 suid=74 rport=40840 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108965.716:18943): pid=160995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=160996 suid=74 rport=40840 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108967.026:18944): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108967.366:18945): pid=160995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=160996 suid=74 rport=40840 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108967.367:18946): pid=160995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=160996 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108967.367:18947): pid=160995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108967.368:18948): pid=160995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=160995 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108967.368:18949): pid=160995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108967.511:18950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108969.141:18951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108969.144:18952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108969.337:18953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108969.526:18954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108972.733:18955): pid=161504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=161504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770108973.004:18956): pid=161503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=161504 suid=74 rport=57118 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770108973.004:18957): pid=161503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=161504 suid=74 rport=57118 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770108975.142:18958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108975.360:18959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108984.121:18960): pid=161503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=161504 suid=74 rport=57118 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770108984.123:18961): pid=161503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=161504 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770108984.124:18962): pid=161503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770108984.125:18963): pid=161503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=161503 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770108984.125:18964): pid=161503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108993.141:18965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108993.144:18966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108993.336:18967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108993.348:18968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108996.140:18969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108996.144:18970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108996.264:18971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108996.349:18972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770108998.140:18973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770108998.625:18974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109000.142:18975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109000.145:18976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109000.285:18977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109000.574:18978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109003.469:18979): pid=163321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=163321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109003.556:18980): pid=163251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=163321 suid=74 rport=53084 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109003.557:18981): pid=163251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=163321 suid=74 rport=53084 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109006.140:18982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109006.354:18983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109007.190:18984): pid=163251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=163321 suid=74 rport=53084 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109007.191:18985): pid=163251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=163321 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109007.192:18986): pid=163251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109007.193:18987): pid=163251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=163251 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109007.193:18988): pid=163251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109024.141:18989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109024.144:18990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109024.273:18991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109024.391:18992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109027.141:18993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109027.145:18994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109027.188:18995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109027.189:18996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109027.272:18997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109027.409:18998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109029.144:18999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109029.630:19000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109030.774:19001): pid=164520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=164520 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109031.057:19002): pid=164507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=164520 suid=74 rport=53292 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109031.057:19003): pid=164507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=164520 suid=74 rport=53292 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109031.146:19004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109031.150:19005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109031.354:19006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109031.569:19007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109032.104:19008): pid=164507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=164520 suid=74 rport=53292 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109032.105:19009): pid=164507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=164520 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109032.106:19010): pid=164507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109032.106:19011): pid=164507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=164507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109032.106:19012): pid=164507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109035.592:19013): pid=164971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=164971 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109035.899:19014): pid=164970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=164971 suid=74 rport=53430 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109035.899:19015): pid=164970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=164971 suid=74 rport=53430 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109037.137:19016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109037.311:19017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109037.807:19018): pid=164970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=164971 suid=74 rport=53430 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109037.808:19019): pid=164970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=164971 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109037.808:19020): pid=164970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109037.809:19021): pid=164970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=164970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109037.809:19022): pid=164970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109055.145:19023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109055.150:19024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109055.272:19025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109055.376:19026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109058.145:19027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109058.149:19028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109058.270:19029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109058.381:19030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109060.144:19031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109060.640:19032): pid=166218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=166218 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109060.651:19033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109060.914:19034): pid=166213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=166218 suid=74 rport=51146 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109060.914:19035): pid=166213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=166218 suid=74 rport=51146 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109061.370:19036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109061.527:19037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109061.870:19038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109062.169:19039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109062.244:19040): pid=166213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=166218 suid=74 rport=51146 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109062.245:19041): pid=166213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=166218 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109062.245:19042): pid=166213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109062.246:19043): pid=166213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=166213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109062.246:19044): pid=166213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109068.145:19045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109068.340:19046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109086.145:19047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109086.148:19048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109086.294:19049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109086.319:19050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109089.141:19051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109089.144:19052): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109089.313:19053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109089.345:19054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109091.139:19055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109091.617:19056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109091.623:19057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109091.734:19058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109093.140:19059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109093.141:19060): pid=168188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=168188 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109093.403:19061): pid=168186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=168188 suid=74 rport=51182 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109093.403:19062): pid=168186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=168188 suid=74 rport=51182 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770109093.441:19063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109094.599:19064): pid=168186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=168188 suid=74 rport=51182 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109094.600:19065): pid=168186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=168188 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109094.600:19066): pid=168186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109094.601:19067): pid=168186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=168186 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109094.601:19068): pid=168186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109099.145:19069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109099.311:19070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109111.180:19071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109111.180:19072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109111.308:19073): pid=169018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=169018 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109111.555:19074): pid=169017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=169018 suid=74 rport=47162 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.190.15.128 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109111.555:19075): pid=169017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=169018 suid=74 rport=47162 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.190.15.128 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109113.810:19076): pid=169017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=169018 suid=74 rport=47162 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.190.15.128 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109113.810:19077): pid=169017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=169018 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109113.811:19078): pid=169017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.190.15.128 addr=27.190.15.128 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109113.811:19079): pid=169017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=169017 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109113.812:19080): pid=169017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.190.15.128 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109114.193:19081): pid=169304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=169304 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109114.462:19082): pid=169302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=169304 suid=74 rport=58696 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109114.462:19083): pid=169302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=169304 suid=74 rport=58696 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109117.148:19084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109117.151:19085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109117.327:19086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109117.399:19087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109118.166:19088): pid=169302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=169304 suid=74 rport=58696 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109118.166:19089): pid=169302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=169304 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109118.167:19090): pid=169302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109118.168:19091): pid=169302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=169302 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109118.168:19092): pid=169302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109120.143:19093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109120.146:19094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109120.287:19095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109120.321:19096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109121.727:19097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109121.836:19098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109122.002:19099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109122.241:19100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109124.145:19101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109124.454:19102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109130.148:19103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109130.348:19104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109132.724:19105): pid=170461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=170461 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109133.035:19106): pid=170284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=170461 suid=74 rport=51188 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109133.035:19107): pid=170284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=170461 suid=74 rport=51188 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109135.300:19108): pid=170284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=170461 suid=74 rport=51188 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109135.301:19109): pid=170284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=170461 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109135.302:19110): pid=170284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109135.302:19111): pid=170284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=170284 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109135.302:19112): pid=170284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109140.676:19113): pid=170706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=170706 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109140.913:19114): pid=170705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=170706 suid=74 rport=55656 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109140.913:19115): pid=170705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=170706 suid=74 rport=55656 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109143.672:19116): pid=170990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=170990 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109144.138:19117): pid=170989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=170990 suid=74 rport=55670 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109144.138:19118): pid=170989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=170990 suid=74 rport=55670 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109148.145:19119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109148.148:19120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109148.325:19121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109148.330:19122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109151.141:19123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109151.144:19124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109151.258:19125): pid=170989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=170990 suid=74 rport=55670 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109151.259:19126): pid=170989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=170990 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109151.260:19127): pid=170989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109151.260:19128): pid=170989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=170989 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109151.260:19129): pid=170989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109151.319:19130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109151.340:19131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109151.389:19132): pid=171302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=171302 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1770109152.144:19133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109152.276:19134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109152.280:19135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109152.764:19136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109154.611:19137): pid=171646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=171646 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1770109155.148:19138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109155.462:19139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109161.147:19140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109161.350:19141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109164.646:19142): pid=170705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=170706 suid=74 rport=55656 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109164.646:19143): pid=170705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=170706 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109164.648:19144): pid=170705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109164.648:19145): pid=170705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=170705 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109164.648:19146): pid=170705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109177.383:19147): pid=171301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=171302 suid=74 rport=43862 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109177.383:19148): pid=171301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=171302 suid=74 rport=43862 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109178.381:19149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109178.385:19150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109178.604:19151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109178.623:19152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109178.953:19153): pid=171301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=171302 suid=74 rport=43862 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109178.953:19154): pid=171301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=171302 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109178.954:19155): pid=171301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109178.955:19156): pid=171301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=171301 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109178.955:19157): pid=171301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109181.393:19158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109181.396:19159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109181.683:19160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109181.839:19161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109182.382:19162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109182.535:19163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109183.140:19164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109183.675:19165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109186.144:19166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109186.445:19167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109189.588:19168): pid=171645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=171646 suid=74 rport=53220 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109189.588:19169): pid=171645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=171646 suid=74 rport=53220 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109190.166:19170): pid=173594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=173594 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109190.429:19171): pid=173593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=173594 suid=74 rport=58488 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109190.429:19172): pid=173593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=173594 suid=74 rport=58488 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109190.858:19173): pid=171645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=171646 suid=74 rport=53220 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109190.858:19174): pid=171645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=171646 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109190.859:19175): pid=171645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109190.861:19176): pid=171645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=171645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109190.861:19177): pid=171645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109192.154:19178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109192.331:19179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109193.544:19180): pid=173593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=173594 suid=74 rport=58488 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109193.544:19181): pid=173593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=173594 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109193.545:19182): pid=173593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109193.546:19183): pid=173593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=173593 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109193.546:19184): pid=173593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770109201.251:19185): pid=174150 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin" type=CRED_ACQ msg=audit(1770109201.252:19186): pid=174150 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin" type=USER_START msg=audit(1770109201.253:19187): pid=174150 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin" type=CRED_REFR msg=audit(1770109201.253:19188): pid=174150 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin" type=SERVICE_START msg=audit(1770109209.142:19189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109209.146:19190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109209.303:19191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109209.325:19192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109212.145:19193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109212.147:19194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109212.324:19195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109212.360:19196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109213.141:19197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109213.268:19198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109214.143:19199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109214.684:19200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109217.144:19201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109217.493:19202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109221.180:19203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109221.180:19204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109223.149:19205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109223.339:19206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1770109226.286:19207): pid=174150 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1770109226.286:19208): pid=174150 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1770109231.742:19209): pid=175744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=175744 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109231.956:19210): pid=175735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=175744 suid=74 rport=51872 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109231.956:19211): pid=175735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=175744 suid=74 rport=51872 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109233.088:19212): pid=175735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=175744 suid=74 rport=51872 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109233.089:19213): pid=175735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=175744 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109233.090:19214): pid=175735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109233.090:19215): pid=175735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=175735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109233.090:19216): pid=175735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109234.325:19217): pid=176022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109234.459:19218): pid=176021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176022 suid=74 rport=36520 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109234.459:19219): pid=176021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176022 suid=74 rport=36520 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109235.018:19220): pid=176021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176022 suid=74 rport=36520 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109235.018:19221): pid=176021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176022 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109235.019:19222): pid=176021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109235.020:19223): pid=176021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109235.020:19224): pid=176021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109235.174:19225): pid=176032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109235.335:19226): pid=176031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176032 suid=74 rport=36522 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109235.336:19227): pid=176031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176032 suid=74 rport=36522 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109235.886:19228): pid=176031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176032 suid=74 rport=36522 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109235.886:19229): pid=176031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176032 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109235.887:19230): pid=176031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109235.888:19231): pid=176031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109235.888:19232): pid=176031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109236.040:19233): pid=176078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176078 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109236.178:19234): pid=176077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176078 suid=74 rport=38322 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109236.178:19235): pid=176077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176078 suid=74 rport=38322 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109236.737:19236): pid=176077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176078 suid=74 rport=38322 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109236.737:19237): pid=176077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176078 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109236.738:19238): pid=176077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109236.739:19239): pid=176077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176077 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109236.739:19240): pid=176077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109236.906:19241): pid=176088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109237.047:19242): pid=176087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176088 suid=74 rport=38326 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109237.047:19243): pid=176087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176088 suid=74 rport=38326 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109237.618:19244): pid=176087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176088 suid=74 rport=38326 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109237.619:19245): pid=176087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176088 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109237.620:19246): pid=176087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109237.620:19247): pid=176087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109237.620:19248): pid=176087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109237.773:19249): pid=176090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109237.911:19250): pid=176089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176090 suid=74 rport=38332 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109237.911:19251): pid=176089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176090 suid=74 rport=38332 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109238.471:19252): pid=176089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176090 suid=74 rport=38332 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109238.472:19253): pid=176089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176090 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109238.473:19254): pid=176089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109238.473:19255): pid=176089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176089 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109238.473:19256): pid=176089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109238.667:19257): pid=176149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109238.831:19258): pid=176148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176149 suid=74 rport=38344 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109238.831:19259): pid=176148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176149 suid=74 rport=38344 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109239.356:19260): pid=176148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176149 suid=74 rport=38344 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109239.357:19261): pid=176148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176149 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109239.357:19262): pid=176148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109239.358:19263): pid=176148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109239.358:19264): pid=176148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109239.375:19265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109239.378:19266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109239.505:19267): pid=176249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109239.564:19268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109239.596:19269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109239.641:19270): pid=176248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176249 suid=74 rport=38350 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109239.642:19271): pid=176248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176249 suid=74 rport=38350 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109240.170:19272): pid=176248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176249 suid=74 rport=38350 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109240.170:19273): pid=176248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176249 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109240.171:19274): pid=176248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109240.172:19275): pid=176248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176248 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109240.172:19276): pid=176248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109240.335:19277): pid=176323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176323 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109240.475:19278): pid=176322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176323 suid=74 rport=38366 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109240.475:19279): pid=176322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176323 suid=74 rport=38366 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109241.073:19280): pid=176322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176323 suid=74 rport=38366 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109241.073:19281): pid=176322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176323 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109241.074:19282): pid=176322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109241.075:19283): pid=176322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176322 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109241.075:19284): pid=176322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109241.235:19285): pid=176344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109241.373:19286): pid=176342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176344 suid=74 rport=38372 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109241.373:19287): pid=176342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176344 suid=74 rport=38372 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109241.952:19288): pid=176342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176344 suid=74 rport=38372 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109241.953:19289): pid=176342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176344 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109241.953:19290): pid=176342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109241.954:19291): pid=176342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109241.954:19292): pid=176342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109242.120:19293): pid=176449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109242.254:19294): pid=176448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176449 suid=74 rport=38384 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109242.254:19295): pid=176448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176449 suid=74 rport=38384 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109242.782:19296): pid=176448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176449 suid=74 rport=38384 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109242.782:19297): pid=176448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176449 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109242.783:19298): pid=176448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109242.784:19299): pid=176448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176448 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109242.784:19300): pid=176448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109242.805:19301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109242.809:19302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109242.935:19303): pid=176566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176566 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109242.991:19304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109243.065:19305): pid=176557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176566 suid=74 rport=38386 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109243.065:19306): pid=176557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176566 suid=74 rport=38386 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770109243.075:19307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109243.644:19308): pid=176557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176566 suid=74 rport=38386 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109243.645:19309): pid=176557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176566 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109243.645:19310): pid=176557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109243.646:19311): pid=176557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109243.646:19312): pid=176557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109243.667:19313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109243.802:19314): pid=176786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176786 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109243.843:19315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109243.932:19316): pid=176781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176786 suid=74 rport=38390 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109243.933:19317): pid=176781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176786 suid=74 rport=38390 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109244.464:19318): pid=176781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176786 suid=74 rport=38390 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109244.464:19319): pid=176781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176786 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109244.465:19320): pid=176781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109244.466:19321): pid=176781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176781 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109244.466:19322): pid=176781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109244.639:19323): pid=176798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176798 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109244.780:19324): pid=176797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176798 suid=74 rport=38406 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109244.780:19325): pid=176797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176798 suid=74 rport=38406 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109245.145:19326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109245.398:19327): pid=176797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176798 suid=74 rport=38406 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109245.399:19328): pid=176797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176798 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109245.400:19329): pid=176797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109245.400:19330): pid=176797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109245.401:19331): pid=176797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109245.576:19332): pid=176830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176830 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109245.621:19333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109245.679:19334): pid=176829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176830 suid=74 rport=34750 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109245.679:19335): pid=176829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176830 suid=74 rport=34750 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109246.251:19336): pid=176829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176830 suid=74 rport=34750 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109246.251:19337): pid=176829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176830 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109246.252:19338): pid=176829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109246.252:19339): pid=176829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176829 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109246.252:19340): pid=176829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109246.408:19341): pid=176841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176841 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109246.541:19342): pid=176840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176841 suid=74 rport=34764 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109246.541:19343): pid=176840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176841 suid=74 rport=34764 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109247.103:19344): pid=176840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176841 suid=74 rport=34764 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109247.103:19345): pid=176840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176841 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109247.104:19346): pid=176840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109247.105:19347): pid=176840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176840 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109247.105:19348): pid=176840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109247.263:19349): pid=176851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176851 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109247.407:19350): pid=176850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176851 suid=74 rport=34770 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109247.407:19351): pid=176850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176851 suid=74 rport=34770 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109247.981:19352): pid=176850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176851 suid=74 rport=34770 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109247.981:19353): pid=176850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176851 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109247.982:19354): pid=176850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109247.982:19355): pid=176850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176850 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109247.982:19356): pid=176850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109247.996:19357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109248.150:19358): pid=176890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176890 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109248.329:19359): pid=176888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176890 suid=74 rport=34786 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109248.330:19360): pid=176888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176890 suid=74 rport=34786 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770109248.373:19361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109248.975:19362): pid=176888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176890 suid=74 rport=34786 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109248.975:19363): pid=176888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176890 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109248.976:19364): pid=176888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109248.977:19365): pid=176888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109248.977:19366): pid=176888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109249.197:19367): pid=176900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109249.331:19368): pid=176899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176900 suid=74 rport=34794 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109249.332:19369): pid=176899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176900 suid=74 rport=34794 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109249.888:19370): pid=176899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176900 suid=74 rport=34794 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109249.888:19371): pid=176899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176900 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109249.889:19372): pid=176899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109249.890:19373): pid=176899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176899 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109249.890:19374): pid=176899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109250.043:19375): pid=176902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176902 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109250.177:19376): pid=176901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176902 suid=74 rport=34802 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109250.177:19377): pid=176901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176902 suid=74 rport=34802 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109250.729:19378): pid=176901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176902 suid=74 rport=34802 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109250.729:19379): pid=176901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176902 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109250.730:19380): pid=176901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109250.731:19381): pid=176901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176901 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109250.731:19382): pid=176901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109250.889:19383): pid=176912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176912 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109251.028:19384): pid=176911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176912 suid=74 rport=34814 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109251.029:19385): pid=176911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176912 suid=74 rport=34814 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109251.610:19386): pid=176911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176912 suid=74 rport=34814 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109251.610:19387): pid=176911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176912 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109251.611:19388): pid=176911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109251.612:19389): pid=176911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176911 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109251.612:19390): pid=176911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109251.778:19391): pid=176971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176971 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109251.908:19392): pid=176970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176971 suid=74 rport=34828 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109251.908:19393): pid=176970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=176971 suid=74 rport=34828 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109252.009:19394): pid=176973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109252.290:19395): pid=176972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=176973 suid=74 rport=49946 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109252.290:19396): pid=176972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=176973 suid=74 rport=49946 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109252.596:19397): pid=176970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176971 suid=74 rport=34828 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109252.597:19398): pid=176970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176971 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109252.598:19399): pid=176970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109252.599:19400): pid=176970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109252.599:19401): pid=176970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109252.738:19402): pid=177044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177044 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109252.874:19403): pid=177043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177044 suid=74 rport=34830 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109252.875:19404): pid=177043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177044 suid=74 rport=34830 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109253.431:19405): pid=177043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=177044 suid=74 rport=34830 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109253.432:19406): pid=177043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177044 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109253.432:19407): pid=177043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109253.433:19408): pid=177043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177043 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109253.433:19409): pid=177043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109253.451:19410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109253.590:19411): pid=177344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109253.634:19412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109253.726:19413): pid=177337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177344 suid=74 rport=34834 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109253.728:19414): pid=177337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177344 suid=74 rport=34834 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109255.150:19415): pid=177337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=177344 suid=74 rport=34834 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109255.150:19416): pid=177337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177344 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109255.151:19417): pid=177337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109255.151:19418): pid=177337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177337 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109255.152:19419): pid=177337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109255.303:19420): pid=177436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770109255.359:19421): pid=176972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176973 suid=74 rport=49946 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109255.360:19422): pid=176972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176973 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109255.361:19423): pid=176972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109255.361:19424): pid=176972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=176972 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109255.361:19425): pid=176972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109255.435:19426): pid=177435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177436 suid=74 rport=34848 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109255.436:19427): pid=177435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177436 suid=74 rport=34848 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109256.104:19428): pid=177435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=177436 suid=74 rport=34848 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109256.104:19429): pid=177435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177436 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109256.105:19430): pid=177435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109256.105:19431): pid=177435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109256.105:19432): pid=177435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109256.279:19433): pid=177446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177446 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109256.400:19434): pid=177437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177446 suid=74 rport=46038 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109256.400:19435): pid=177437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177446 suid=74 rport=46038 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109256.972:19436): pid=177437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=177446 suid=74 rport=46038 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109256.972:19437): pid=177437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177446 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109256.973:19438): pid=177437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109256.973:19439): pid=177437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109256.973:19440): pid=177437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109257.117:19441): pid=177448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177448 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109257.244:19442): pid=177447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177448 suid=74 rport=46040 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109257.244:19443): pid=177447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177448 suid=74 rport=46040 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109257.792:19444): pid=177447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=177448 suid=74 rport=46040 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109257.792:19445): pid=177447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177448 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109257.793:19446): pid=177447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109257.794:19447): pid=177447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109257.794:19448): pid=177447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109257.957:19449): pid=177458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109258.095:19450): pid=177457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177458 suid=74 rport=46052 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109258.095:19451): pid=177457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177458 suid=74 rport=46052 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109259.056:19452): pid=177457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=177458 suid=74 rport=46052 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109259.056:19453): pid=177457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177458 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109259.057:19454): pid=177457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109259.057:19455): pid=177457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109259.057:19456): pid=177457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109259.222:19457): pid=177468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177468 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109259.345:19458): pid=177467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177468 suid=74 rport=46060 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109259.345:19459): pid=177467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177468 suid=74 rport=46060 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109259.916:19460): pid=177467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=177468 suid=74 rport=46060 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109259.916:19461): pid=177467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177468 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109259.917:19462): pid=177467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109259.917:19463): pid=177467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177467 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109259.918:19464): pid=177467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109260.075:19465): pid=177478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177478 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109260.217:19466): pid=177477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177478 suid=74 rport=46070 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109260.217:19467): pid=177477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177478 suid=74 rport=46070 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109260.813:19468): pid=177477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=177478 suid=74 rport=46070 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109260.814:19469): pid=177477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177478 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109260.814:19470): pid=177477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109260.815:19471): pid=177477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177477 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109260.815:19472): pid=177477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109260.975:19473): pid=177488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177488 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109261.129:19474): pid=177487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177488 suid=74 rport=46072 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109261.129:19475): pid=177487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177488 suid=74 rport=46072 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109261.716:19476): pid=177487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=177488 suid=74 rport=46072 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109261.717:19477): pid=177487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177488 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109261.718:19478): pid=177487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109261.719:19479): pid=177487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177487 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109261.719:19480): pid=177487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109261.885:19481): pid=177524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177524 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109262.024:19482): pid=177523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177524 suid=74 rport=46086 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109262.024:19483): pid=177523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177524 suid=74 rport=46086 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109262.697:19484): pid=177523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=177524 suid=74 rport=46086 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109262.698:19485): pid=177523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177524 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109262.698:19486): pid=177523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109262.699:19487): pid=177523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177523 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109262.699:19488): pid=177523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109262.849:19489): pid=177568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109262.993:19490): pid=177548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177568 suid=74 rport=46088 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109262.994:19491): pid=177548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177568 suid=74 rport=46088 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109263.540:19492): pid=177548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=177568 suid=74 rport=46088 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109263.541:19493): pid=177548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177568 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109263.541:19494): pid=177548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109263.542:19495): pid=177548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177548 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109263.542:19496): pid=177548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109263.702:19497): pid=177749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109263.821:19498): pid=177748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177749 suid=74 rport=46090 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109263.821:19499): pid=177748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177749 suid=74 rport=46090 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109264.356:19500): pid=177748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=177749 suid=74 rport=46090 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109264.356:19501): pid=177748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177749 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109264.357:19502): pid=177748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109264.357:19503): pid=177748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109264.357:19504): pid=177748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109264.504:19505): pid=177814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109264.632:19506): pid=177813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177814 suid=74 rport=46098 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109264.633:19507): pid=177813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177814 suid=74 rport=46098 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109265.203:19508): pid=177813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=177814 suid=74 rport=46098 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109265.204:19509): pid=177813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177814 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109265.205:19510): pid=177813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109265.205:19511): pid=177813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177813 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109265.206:19512): pid=177813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109265.360:19513): pid=177870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109265.494:19514): pid=177868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177870 suid=74 rport=46110 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109265.494:19515): pid=177868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177870 suid=74 rport=46110 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109266.169:19516): pid=177868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=177870 suid=74 rport=46110 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109266.170:19517): pid=177868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177870 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109266.171:19518): pid=177868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109266.171:19519): pid=177868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109266.171:19520): pid=177868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109266.333:19521): pid=177943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177943 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109266.472:19522): pid=177942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177943 suid=74 rport=55750 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109266.472:19523): pid=177942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=177943 suid=74 rport=55750 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109267.084:19524): pid=177942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=177943 suid=74 rport=55750 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109267.085:19525): pid=177942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177943 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109267.086:19526): pid=177942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109267.087:19527): pid=177942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=177942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109267.087:19528): pid=177942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109267.231:19529): pid=178011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178011 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109267.360:19530): pid=178010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178011 suid=74 rport=55752 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109267.360:19531): pid=178010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178011 suid=74 rport=55752 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109267.890:19532): pid=178010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178011 suid=74 rport=55752 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109267.891:19533): pid=178010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178011 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109267.891:19534): pid=178010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109267.892:19535): pid=178010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178010 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109267.892:19536): pid=178010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109268.047:19537): pid=178023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109268.181:19538): pid=178022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178023 suid=74 rport=55764 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109268.181:19539): pid=178022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178023 suid=74 rport=55764 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109268.738:19540): pid=178022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178023 suid=74 rport=55764 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109268.738:19541): pid=178022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178023 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109268.739:19542): pid=178022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109268.740:19543): pid=178022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109268.740:19544): pid=178022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109268.903:19545): pid=178033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178033 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109269.031:19546): pid=178032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178033 suid=74 rport=55768 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109269.031:19547): pid=178032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178033 suid=74 rport=55768 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109269.726:19548): pid=178032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178033 suid=74 rport=55768 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109269.727:19549): pid=178032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178033 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109269.727:19550): pid=178032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109269.728:19551): pid=178032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109269.728:19552): pid=178032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109269.749:19553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109269.752:19554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109269.875:19555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109269.880:19556): pid=178073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178073 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109269.990:19557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109270.016:19558): pid=178072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178073 suid=74 rport=55770 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109270.016:19559): pid=178072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178073 suid=74 rport=55770 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109270.587:19560): pid=178072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178073 suid=74 rport=55770 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109270.587:19561): pid=178072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178073 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109270.588:19562): pid=178072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109270.589:19563): pid=178072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109270.589:19564): pid=178072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109270.766:19565): pid=178092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178092 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109270.926:19566): pid=178091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178092 suid=74 rport=55778 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109270.926:19567): pid=178091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178092 suid=74 rport=55778 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109271.573:19568): pid=178091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178092 suid=74 rport=55778 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109271.573:19569): pid=178091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178092 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109271.574:19570): pid=178091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109271.575:19571): pid=178091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178091 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109271.575:19572): pid=178091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109271.725:19573): pid=178102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178102 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109271.873:19574): pid=178101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178102 suid=74 rport=55790 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109271.873:19575): pid=178101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178102 suid=74 rport=55790 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109272.428:19576): pid=178101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178102 suid=74 rport=55790 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109272.428:19577): pid=178101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178102 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109272.429:19578): pid=178101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109272.429:19579): pid=178101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109272.430:19580): pid=178101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109272.624:19581): pid=178104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178104 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109272.906:19582): pid=178103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178104 suid=74 rport=55804 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109272.906:19583): pid=178103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178104 suid=74 rport=55804 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109273.146:19584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109273.150:19585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109273.310:19586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109273.398:19587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109273.416:19588): pid=178103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178104 suid=74 rport=55804 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109273.416:19589): pid=178103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178104 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109273.417:19590): pid=178103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109273.418:19591): pid=178103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109273.418:19592): pid=178103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109273.570:19593): pid=178342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109273.711:19594): pid=178328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178342 suid=74 rport=55814 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109273.712:19595): pid=178328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178342 suid=74 rport=55814 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109274.140:19596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109274.284:19597): pid=178328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178342 suid=74 rport=55814 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109274.285:19598): pid=178328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178342 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109274.285:19599): pid=178328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109274.286:19600): pid=178328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178328 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109274.286:19601): pid=178328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109274.300:19602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109274.451:19603): pid=178452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109274.590:19604): pid=178451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178452 suid=74 rport=55818 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109274.590:19605): pid=178451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178452 suid=74 rport=55818 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109275.180:19606): pid=178451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178452 suid=74 rport=55818 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109275.180:19607): pid=178451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178452 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109275.181:19608): pid=178451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109275.181:19609): pid=178451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178451 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109275.181:19610): pid=178451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109275.328:19611): pid=178462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178462 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109275.468:19612): pid=178461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178462 suid=74 rport=55834 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109275.468:19613): pid=178461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178462 suid=74 rport=55834 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109275.997:19614): pid=178461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178462 suid=74 rport=55834 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109275.997:19615): pid=178461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178462 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109275.997:19616): pid=178461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109275.998:19617): pid=178461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178461 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109275.998:19618): pid=178461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109276.020:19619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109276.235:19620): pid=178495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178495 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109276.344:19621): pid=178494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178495 suid=74 rport=44096 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109276.344:19622): pid=178494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178495 suid=74 rport=44096 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770109276.472:19623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109276.925:19624): pid=178494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178495 suid=74 rport=44096 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109276.925:19625): pid=178494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178495 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109276.926:19626): pid=178494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109276.926:19627): pid=178494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109276.926:19628): pid=178494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109277.088:19629): pid=178506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178506 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109277.223:19630): pid=178505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178506 suid=74 rport=44106 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109277.224:19631): pid=178505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178506 suid=74 rport=44106 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109277.816:19632): pid=178505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178506 suid=74 rport=44106 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109277.816:19633): pid=178505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178506 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109277.817:19634): pid=178505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109277.818:19635): pid=178505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109277.818:19636): pid=178505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109277.975:19637): pid=178565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178565 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109278.107:19638): pid=178536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178565 suid=74 rport=44112 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109278.107:19639): pid=178536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178565 suid=74 rport=44112 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109278.682:19640): pid=178536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178565 suid=74 rport=44112 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109278.682:19641): pid=178536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178565 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109278.683:19642): pid=178536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109278.684:19643): pid=178536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109278.684:19644): pid=178536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109278.696:19645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109278.852:19646): pid=178634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178634 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109278.986:19647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109278.988:19648): pid=178626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178634 suid=74 rport=44128 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109278.988:19649): pid=178626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178634 suid=74 rport=44128 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109279.698:19650): pid=178626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178634 suid=74 rport=44128 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109279.698:19651): pid=178626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178634 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109279.699:19652): pid=178626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109279.700:19653): pid=178626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178626 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109279.700:19654): pid=178626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109279.870:19655): pid=178721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178721 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109280.010:19656): pid=178720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178721 suid=74 rport=44134 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109280.010:19657): pid=178720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178721 suid=74 rport=44134 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109280.563:19658): pid=178720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178721 suid=74 rport=44134 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109280.563:19659): pid=178720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178721 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109280.563:19660): pid=178720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109280.564:19661): pid=178720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178720 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109280.564:19662): pid=178720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109280.718:19663): pid=178742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109280.846:19664): pid=178741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178742 suid=74 rport=44150 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109280.847:19665): pid=178741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178742 suid=74 rport=44150 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109281.413:19666): pid=178741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178742 suid=74 rport=44150 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109281.413:19667): pid=178741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178742 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109281.414:19668): pid=178741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109281.415:19669): pid=178741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178741 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109281.415:19670): pid=178741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109281.565:19671): pid=178752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109281.697:19672): pid=178751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178752 suid=74 rport=44160 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109281.697:19673): pid=178751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178752 suid=74 rport=44160 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109282.275:19674): pid=178751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178752 suid=74 rport=44160 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109282.275:19675): pid=178751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178752 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109282.276:19676): pid=178751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109282.277:19677): pid=178751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178751 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109282.277:19678): pid=178751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109282.428:19679): pid=178762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109282.565:19680): pid=178761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178762 suid=74 rport=44174 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109282.565:19681): pid=178761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178762 suid=74 rport=44174 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109283.249:19682): pid=178761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178762 suid=74 rport=44174 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109283.249:19683): pid=178761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178762 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109283.250:19684): pid=178761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109283.251:19685): pid=178761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178761 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109283.251:19686): pid=178761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109283.408:19687): pid=178813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178813 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109283.546:19688): pid=178812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178813 suid=74 rport=44184 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109283.546:19689): pid=178812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=178813 suid=74 rport=44184 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109284.117:19690): pid=178812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178813 suid=74 rport=44184 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109284.118:19691): pid=178812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178813 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109284.118:19692): pid=178812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109284.119:19693): pid=178812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=178812 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109284.119:19694): pid=178812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109284.140:19695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109284.278:19696): pid=179073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179073 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109284.322:19697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109284.419:19698): pid=179063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179073 suid=74 rport=44192 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109284.419:19699): pid=179063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179073 suid=74 rport=44192 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109284.983:19700): pid=179063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179073 suid=74 rport=44192 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109284.983:19701): pid=179063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179073 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109284.984:19702): pid=179063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109284.985:19703): pid=179063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109284.985:19704): pid=179063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109286.172:19705): pid=179099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179099 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109286.365:19706): pid=179098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179099 suid=74 rport=44198 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109286.365:19707): pid=179098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179099 suid=74 rport=44198 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109286.893:19708): pid=179098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179099 suid=74 rport=44198 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109286.893:19709): pid=179098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179099 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109286.894:19710): pid=179098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109286.894:19711): pid=179098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109286.894:19712): pid=179098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109287.043:19713): pid=179101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109287.175:19714): pid=179100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179101 suid=74 rport=39324 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109287.175:19715): pid=179100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179101 suid=74 rport=39324 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109287.732:19716): pid=179100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179101 suid=74 rport=39324 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109287.732:19717): pid=179100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179101 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109287.733:19718): pid=179100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109287.733:19719): pid=179100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109287.733:19720): pid=179100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109287.900:19721): pid=179111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179111 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109288.043:19722): pid=179110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179111 suid=74 rport=39328 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109288.043:19723): pid=179110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179111 suid=74 rport=39328 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109288.629:19724): pid=179110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179111 suid=74 rport=39328 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109288.629:19725): pid=179110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179111 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109288.630:19726): pid=179110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109288.631:19727): pid=179110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179110 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109288.631:19728): pid=179110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109288.774:19729): pid=179121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109288.905:19730): pid=179120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179121 suid=74 rport=39332 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109288.905:19731): pid=179120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179121 suid=74 rport=39332 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109289.429:19732): pid=179120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179121 suid=74 rport=39332 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109289.430:19733): pid=179120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179121 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109289.430:19734): pid=179120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109289.431:19735): pid=179120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179120 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109289.431:19736): pid=179120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109289.642:19737): pid=179131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179131 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109289.816:19738): pid=179130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179131 suid=74 rport=39336 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109289.816:19739): pid=179130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179131 suid=74 rport=39336 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109290.341:19740): pid=179130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179131 suid=74 rport=39336 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109290.341:19741): pid=179130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179131 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109290.342:19742): pid=179130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109290.342:19743): pid=179130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179130 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109290.343:19744): pid=179130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109290.500:19745): pid=179141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179141 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109290.636:19746): pid=179140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179141 suid=74 rport=39352 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109290.636:19747): pid=179140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179141 suid=74 rport=39352 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109291.185:19748): pid=179140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179141 suid=74 rport=39352 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109291.186:19749): pid=179140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179141 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109291.186:19750): pid=179140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109291.187:19751): pid=179140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179140 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109291.187:19752): pid=179140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109291.362:19753): pid=179200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179200 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109291.492:19754): pid=179199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179200 suid=74 rport=39368 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109291.492:19755): pid=179199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179200 suid=74 rport=39368 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109292.065:19756): pid=179199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179200 suid=74 rport=39368 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109292.066:19757): pid=179199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179200 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109292.066:19758): pid=179199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109292.067:19759): pid=179199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179199 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109292.067:19760): pid=179199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109292.225:19761): pid=179263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179263 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109292.363:19762): pid=179262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179263 suid=74 rport=39384 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109292.363:19763): pid=179262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179263 suid=74 rport=39384 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109292.932:19764): pid=179262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179263 suid=74 rport=39384 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109292.933:19765): pid=179262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179263 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109292.934:19766): pid=179262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109292.934:19767): pid=179262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179262 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109292.934:19768): pid=179262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109293.130:19769): pid=179370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109293.264:19770): pid=179369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179370 suid=74 rport=39390 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109293.264:19771): pid=179369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179370 suid=74 rport=39390 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109293.830:19772): pid=179369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179370 suid=74 rport=39390 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109293.830:19773): pid=179369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179370 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109293.831:19774): pid=179369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109293.832:19775): pid=179369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109293.832:19776): pid=179369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109293.978:19777): pid=179555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179555 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109294.109:19778): pid=179554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179555 suid=74 rport=39400 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109294.110:19779): pid=179554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179555 suid=74 rport=39400 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109294.686:19780): pid=179554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179555 suid=74 rport=39400 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109294.687:19781): pid=179554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179555 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109294.687:19782): pid=179554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109294.688:19783): pid=179554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179554 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109294.688:19784): pid=179554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109294.851:19785): pid=179620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179620 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109294.986:19786): pid=179619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179620 suid=74 rport=39406 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109294.986:19787): pid=179619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179620 suid=74 rport=39406 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109295.562:19788): pid=179619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179620 suid=74 rport=39406 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109295.563:19789): pid=179619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179620 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109295.564:19790): pid=179619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109295.564:19791): pid=179619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179619 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109295.564:19792): pid=179619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109295.706:19793): pid=179632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179632 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109295.842:19794): pid=179629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179632 suid=74 rport=48236 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109295.842:19795): pid=179629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179632 suid=74 rport=48236 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109296.491:19796): pid=179629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179632 suid=74 rport=48236 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109296.492:19797): pid=179629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179632 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109296.493:19798): pid=179629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109296.493:19799): pid=179629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109296.493:19800): pid=179629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109296.677:19801): pid=179676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179676 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109296.836:19802): pid=179675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179676 suid=74 rport=48242 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109296.836:19803): pid=179675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179676 suid=74 rport=48242 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109297.469:19804): pid=179675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179676 suid=74 rport=48242 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109297.470:19805): pid=179675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179676 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109297.471:19806): pid=179675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109297.471:19807): pid=179675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179675 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109297.471:19808): pid=179675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109297.644:19809): pid=179687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179687 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109297.782:19810): pid=179685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179687 suid=74 rport=48244 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109297.783:19811): pid=179685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179687 suid=74 rport=48244 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109297.877:19812): pid=179688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179688 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109297.940:19813): pid=179686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=179688 suid=74 rport=41270 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109297.941:19814): pid=179686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=179688 suid=74 rport=41270 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109298.378:19815): pid=179685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179687 suid=74 rport=48244 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109298.378:19816): pid=179685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179687 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109298.379:19817): pid=179685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109298.380:19818): pid=179685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179685 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109298.380:19819): pid=179685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109298.540:19820): pid=179698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109298.700:19821): pid=179697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179698 suid=74 rport=48252 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109298.701:19822): pid=179697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179698 suid=74 rport=48252 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109299.264:19823): pid=179697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179698 suid=74 rport=48252 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109299.265:19824): pid=179697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179698 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109299.266:19825): pid=179697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109299.266:19826): pid=179697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179697 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109299.266:19827): pid=179697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109299.417:19828): pid=179700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179700 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109299.549:19829): pid=179699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179700 suid=74 rport=48260 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109299.549:19830): pid=179699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179700 suid=74 rport=48260 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109300.147:19831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109300.152:19832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109300.221:19833): pid=179699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179700 suid=74 rport=48260 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109300.221:19834): pid=179699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179700 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109300.222:19835): pid=179699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109300.222:19836): pid=179699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109300.222:19837): pid=179699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109300.301:19838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109300.347:19839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109300.385:19840): pid=179749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109300.520:19841): pid=179748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179749 suid=74 rport=48274 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109300.520:19842): pid=179748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179749 suid=74 rport=48274 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109301.097:19843): pid=179748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179749 suid=74 rport=48274 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109301.097:19844): pid=179748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179749 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109301.098:19845): pid=179748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109301.099:19846): pid=179748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109301.099:19847): pid=179748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109301.257:19848): pid=179759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179759 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109301.394:19849): pid=179758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179759 suid=74 rport=48278 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109301.395:19850): pid=179758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179759 suid=74 rport=48278 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109301.989:19851): pid=179758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179759 suid=74 rport=48278 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109301.992:19852): pid=179758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179759 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109301.992:19853): pid=179758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109301.993:19854): pid=179758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109301.993:19855): pid=179758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109302.147:19856): pid=179856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179856 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109302.287:19857): pid=179853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179856 suid=74 rport=48286 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109302.288:19858): pid=179853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179856 suid=74 rport=48286 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109302.861:19859): pid=179853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179856 suid=74 rport=48286 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109302.862:19860): pid=179853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179856 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109302.862:19861): pid=179853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109302.863:19862): pid=179853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179853 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109302.863:19863): pid=179853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109303.010:19864): pid=179879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179879 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109303.142:19865): pid=179878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179879 suid=74 rport=48288 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109303.143:19866): pid=179878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=179879 suid=74 rport=48288 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109303.970:19867): pid=179878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179879 suid=74 rport=48288 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109303.970:19868): pid=179878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179879 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109303.971:19869): pid=179878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109303.971:19870): pid=179878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179878 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109303.971:19871): pid=179878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109303.990:19872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109303.993:19873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109304.037:19874): pid=179686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179688 suid=74 rport=41270 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109304.038:19875): pid=179686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179688 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109304.039:19876): pid=179686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109304.039:19877): pid=179686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=179686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109304.039:19878): pid=179686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109304.129:19879): pid=180130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180130 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109304.176:19880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109304.227:19881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109304.263:19882): pid=180126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180130 suid=74 rport=48290 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109304.263:19883): pid=180126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180130 suid=74 rport=48290 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109304.815:19884): pid=180126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180130 suid=74 rport=48290 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109304.816:19885): pid=180126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180130 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109304.818:19886): pid=180126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109304.819:19887): pid=180126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180126 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109304.819:19888): pid=180126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109304.835:19889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109304.979:19890): pid=180278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180278 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109305.014:19891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109305.116:19892): pid=180273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180278 suid=74 rport=48294 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109305.116:19893): pid=180273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180278 suid=74 rport=48294 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109305.682:19894): pid=180273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180278 suid=74 rport=48294 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109305.682:19895): pid=180273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180278 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109305.683:19896): pid=180273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109305.684:19897): pid=180273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109305.684:19898): pid=180273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109305.830:19899): pid=180348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180348 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109305.965:19900): pid=180347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180348 suid=74 rport=35574 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109305.965:19901): pid=180347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180348 suid=74 rport=35574 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109306.521:19902): pid=180347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180348 suid=74 rport=35574 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109306.522:19903): pid=180347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180348 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109306.523:19904): pid=180347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109306.523:19905): pid=180347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180347 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109306.524:19906): pid=180347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109306.537:19907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109306.711:19908): pid=180437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109306.928:19909): pid=180436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180437 suid=74 rport=35576 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109306.929:19910): pid=180436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180437 suid=74 rport=35576 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770109307.046:19911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109307.576:19912): pid=180436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180437 suid=74 rport=35576 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109307.576:19913): pid=180436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180437 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109307.577:19914): pid=180436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109307.578:19915): pid=180436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109307.578:19916): pid=180436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109307.744:19917): pid=180459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109307.882:19918): pid=180458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180459 suid=74 rport=35590 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109307.882:19919): pid=180458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180459 suid=74 rport=35590 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109308.467:19920): pid=180458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180459 suid=74 rport=35590 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109308.467:19921): pid=180458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180459 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109308.468:19922): pid=180458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109308.469:19923): pid=180458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109308.469:19924): pid=180458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109308.619:19925): pid=180461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180461 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109308.753:19926): pid=180460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180461 suid=74 rport=35592 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109308.753:19927): pid=180460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180461 suid=74 rport=35592 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109309.150:19928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109309.296:19929): pid=180460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180461 suid=74 rport=35592 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109309.297:19930): pid=180460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180461 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109309.298:19931): pid=180460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109309.298:19932): pid=180460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180460 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109309.298:19933): pid=180460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109309.471:19934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109309.548:19935): pid=180498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109309.678:19936): pid=180497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180498 suid=74 rport=35602 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109309.678:19937): pid=180497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180498 suid=74 rport=35602 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109310.299:19938): pid=180497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180498 suid=74 rport=35602 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109310.299:19939): pid=180497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180498 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109310.300:19940): pid=180497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109310.301:19941): pid=180497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180497 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109310.301:19942): pid=180497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109310.563:19943): pid=180508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180508 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109310.678:19944): pid=180507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180508 suid=74 rport=35614 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109310.678:19945): pid=180507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180508 suid=74 rport=35614 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109311.141:19946): pid=180507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180508 suid=74 rport=35614 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109311.141:19947): pid=180507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180508 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109311.143:19948): pid=180507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109311.143:19949): pid=180507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109311.143:19950): pid=180507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109311.304:19951): pid=180518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109311.442:19952): pid=180517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180518 suid=74 rport=35616 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109311.442:19953): pid=180517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180518 suid=74 rport=35616 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109312.025:19954): pid=180517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180518 suid=74 rport=35616 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109312.025:19955): pid=180517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180518 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109312.026:19956): pid=180517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109312.026:19957): pid=180517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180517 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109312.027:19958): pid=180517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109312.188:19959): pid=180528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180528 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109312.333:19960): pid=180527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180528 suid=74 rport=35618 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109312.333:19961): pid=180527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180528 suid=74 rport=35618 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109312.925:19962): pid=180527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180528 suid=74 rport=35618 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109312.925:19963): pid=180527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180528 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109312.926:19964): pid=180527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109312.927:19965): pid=180527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109312.927:19966): pid=180527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109313.084:19967): pid=180538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180538 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109313.224:19968): pid=180537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180538 suid=74 rport=35632 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109313.225:19969): pid=180537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180538 suid=74 rport=35632 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109313.952:19970): pid=180537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180538 suid=74 rport=35632 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109313.953:19971): pid=180537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180538 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109313.954:19972): pid=180537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109313.954:19973): pid=180537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109313.954:19974): pid=180537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109314.143:19975): pid=180755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180755 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109314.255:19976): pid=180754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180755 suid=74 rport=35648 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109314.255:19977): pid=180754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180755 suid=74 rport=35648 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109314.728:19978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109314.862:19979): pid=180754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180755 suid=74 rport=35648 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109314.863:19980): pid=180754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180755 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109314.864:19981): pid=180754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109314.865:19982): pid=180754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180754 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109314.865:19983): pid=180754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109314.918:19984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109315.014:19985): pid=180858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109315.160:19986): pid=180857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180858 suid=74 rport=35654 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109315.160:19987): pid=180857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180858 suid=74 rport=35654 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109315.702:19988): pid=180857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180858 suid=74 rport=35654 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109315.702:19989): pid=180857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180858 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109315.703:19990): pid=180857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109315.704:19991): pid=180857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109315.704:19992): pid=180857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109316.894:19993): pid=180868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109317.036:19994): pid=180867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180868 suid=74 rport=60384 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109317.036:19995): pid=180867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180868 suid=74 rport=60384 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109317.830:19996): pid=180867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180868 suid=74 rport=60384 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109317.831:19997): pid=180867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180868 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109317.832:19998): pid=180867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109317.833:19999): pid=180867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180867 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109317.833:20000): pid=180867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109317.984:20001): pid=180935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180935 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109318.121:20002): pid=180933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180935 suid=74 rport=60390 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109318.121:20003): pid=180933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180935 suid=74 rport=60390 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109318.680:20004): pid=180933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180935 suid=74 rport=60390 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109318.680:20005): pid=180933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180935 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109318.681:20006): pid=180933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109318.682:20007): pid=180933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109318.682:20008): pid=180933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109318.845:20009): pid=180998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180998 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109318.988:20010): pid=180997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180998 suid=74 rport=60396 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109318.988:20011): pid=180997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=180998 suid=74 rport=60396 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109319.580:20012): pid=180997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180998 suid=74 rport=60396 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109319.581:20013): pid=180997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180998 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109319.581:20014): pid=180997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109319.582:20015): pid=180997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=180997 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109319.582:20016): pid=180997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109319.729:20017): pid=181064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109319.858:20018): pid=181063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181064 suid=74 rport=60406 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109319.859:20019): pid=181063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181064 suid=74 rport=60406 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109320.431:20020): pid=181063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181064 suid=74 rport=60406 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109320.431:20021): pid=181063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181064 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109320.432:20022): pid=181063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109320.432:20023): pid=181063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109320.433:20024): pid=181063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109320.607:20025): pid=181085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109320.827:20026): pid=181084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181085 suid=74 rport=60412 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109320.828:20027): pid=181084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181085 suid=74 rport=60412 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109321.388:20028): pid=181084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181085 suid=74 rport=60412 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109321.388:20029): pid=181084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181085 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109321.389:20030): pid=181084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109321.390:20031): pid=181084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109321.390:20032): pid=181084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109321.554:20033): pid=181095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181095 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109321.696:20034): pid=181094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181095 suid=74 rport=60422 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109321.696:20035): pid=181094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181095 suid=74 rport=60422 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109322.290:20036): pid=181094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181095 suid=74 rport=60422 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109322.290:20037): pid=181094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181095 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109322.291:20038): pid=181094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109322.292:20039): pid=181094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181094 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109322.292:20040): pid=181094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109322.452:20041): pid=181105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181105 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109322.604:20042): pid=181104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181105 suid=74 rport=60428 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109322.604:20043): pid=181104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181105 suid=74 rport=60428 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109323.158:20044): pid=181104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181105 suid=74 rport=60428 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109323.158:20045): pid=181104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181105 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109323.159:20046): pid=181104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109323.159:20047): pid=181104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181104 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109323.159:20048): pid=181104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109323.309:20049): pid=181138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109323.442:20050): pid=181126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181138 suid=74 rport=60434 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109323.442:20051): pid=181126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181138 suid=74 rport=60434 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109324.008:20052): pid=181126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181138 suid=74 rport=60434 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109324.009:20053): pid=181126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181138 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109324.010:20054): pid=181126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109324.010:20055): pid=181126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181126 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109324.010:20056): pid=181126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109324.172:20057): pid=181332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181332 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109324.383:20058): pid=181331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181332 suid=74 rport=60448 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109324.383:20059): pid=181331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181332 suid=74 rport=60448 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109324.928:20060): pid=181331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181332 suid=74 rport=60448 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109324.929:20061): pid=181331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181332 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109324.930:20062): pid=181331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109324.930:20063): pid=181331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181331 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109324.930:20064): pid=181331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109325.101:20065): pid=181387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181387 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109325.245:20066): pid=181386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181387 suid=74 rport=60464 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109325.245:20067): pid=181386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181387 suid=74 rport=60464 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109325.839:20068): pid=181386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181387 suid=74 rport=60464 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109325.839:20069): pid=181386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181387 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109325.840:20070): pid=181386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109325.841:20071): pid=181386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109325.841:20072): pid=181386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109325.985:20073): pid=181398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109326.110:20074): pid=181397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181398 suid=74 rport=39122 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109326.110:20075): pid=181397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181398 suid=74 rport=39122 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109326.288:20076): pid=181407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181407 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109326.392:20077): pid=181396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=181407 suid=74 rport=51560 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109326.393:20078): pid=181396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=181407 suid=74 rport=51560 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109326.664:20079): pid=181397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181398 suid=74 rport=39122 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109326.664:20080): pid=181397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181398 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109326.665:20081): pid=181397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109326.666:20082): pid=181397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181397 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109326.666:20083): pid=181397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109326.838:20084): pid=181409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109326.993:20085): pid=181408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181409 suid=74 rport=39138 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109326.993:20086): pid=181408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181409 suid=74 rport=39138 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109327.658:20087): pid=181408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181409 suid=74 rport=39138 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109327.659:20088): pid=181408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181409 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109327.660:20089): pid=181408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109327.660:20090): pid=181408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181408 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109327.660:20091): pid=181408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109327.704:20092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109327.704:20093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109327.765:20094): pid=181396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181407 suid=74 rport=51560 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109327.765:20095): pid=181396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181407 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109327.767:20096): pid=181396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109327.767:20097): pid=181396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181396 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109327.767:20098): pid=181396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109327.844:20099): pid=181421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181421 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109327.982:20100): pid=181420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181421 suid=74 rport=39144 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109327.983:20101): pid=181420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181421 suid=74 rport=39144 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109328.396:20102): pid=181431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770109328.555:20103): pid=181420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181421 suid=74 rport=39144 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109328.556:20104): pid=181420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181421 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109328.557:20105): pid=181420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109328.557:20106): pid=181420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181420 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109328.557:20107): pid=181420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109328.705:20108): pid=181430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=181431 suid=74 rport=34864 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109328.706:20109): pid=181430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=181431 suid=74 rport=34864 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109328.721:20110): pid=181433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181433 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109328.890:20111): pid=181432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181433 suid=74 rport=39154 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109328.890:20112): pid=181432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181433 suid=74 rport=39154 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109329.443:20113): pid=181432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181433 suid=74 rport=39154 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109329.443:20114): pid=181432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181433 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109329.444:20115): pid=181432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109329.445:20116): pid=181432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109329.445:20117): pid=181432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109329.587:20118): pid=181443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181443 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109329.715:20119): pid=181442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181443 suid=74 rport=39162 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109329.715:20120): pid=181442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181443 suid=74 rport=39162 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109330.279:20121): pid=181442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181443 suid=74 rport=39162 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109330.279:20122): pid=181442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181443 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109330.280:20123): pid=181442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109330.280:20124): pid=181442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181442 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109330.280:20125): pid=181442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109330.387:20126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109330.389:20127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109330.435:20128): pid=181474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181474 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109330.517:20129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109330.568:20130): pid=181469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181474 suid=74 rport=39168 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109330.568:20131): pid=181469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181474 suid=74 rport=39168 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770109330.571:20132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109330.636:20133): pid=181430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181431 suid=74 rport=34864 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109330.637:20134): pid=181430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181431 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109330.638:20135): pid=181430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109330.638:20136): pid=181430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181430 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109330.638:20137): pid=181430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109331.188:20138): pid=181469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181474 suid=74 rport=39168 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109331.189:20139): pid=181469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181474 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109331.189:20140): pid=181469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109331.190:20141): pid=181469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181469 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109331.190:20142): pid=181469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109331.342:20143): pid=181557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770109331.356:20144): pid=181558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181558 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109331.499:20145): pid=181556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181558 suid=74 rport=39178 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109331.499:20146): pid=181556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181558 suid=74 rport=39178 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109331.700:20147): pid=181552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=181557 suid=74 rport=34876 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109331.701:20148): pid=181552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=181557 suid=74 rport=34876 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109332.077:20149): pid=181556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181558 suid=74 rport=39178 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109332.078:20150): pid=181556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181558 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109332.079:20151): pid=181556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109332.079:20152): pid=181556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181556 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109332.079:20153): pid=181556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109332.239:20154): pid=181615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109332.389:20155): pid=181613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181615 suid=74 rport=39186 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109332.389:20156): pid=181613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181615 suid=74 rport=39186 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109332.939:20157): pid=181613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181615 suid=74 rport=39186 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109332.940:20158): pid=181613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181615 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109332.941:20159): pid=181613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109332.941:20160): pid=181613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181613 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109332.941:20161): pid=181613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109333.102:20162): pid=181684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181684 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109333.234:20163): pid=181680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181684 suid=74 rport=39202 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109333.235:20164): pid=181680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181684 suid=74 rport=39202 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109333.797:20165): pid=181680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181684 suid=74 rport=39202 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109333.798:20166): pid=181680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181684 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109333.798:20167): pid=181680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109333.799:20168): pid=181680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109333.799:20169): pid=181680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109333.928:20170): pid=181552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181557 suid=74 rport=34876 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109333.928:20171): pid=181552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181557 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109333.929:20172): pid=181552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109333.930:20173): pid=181552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181552 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109333.930:20174): pid=181552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109333.962:20175): pid=181793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181793 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770109333.997:20176): pid=181881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109334.098:20177): pid=181756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181793 suid=74 rport=39216 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109334.099:20178): pid=181756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=181793 suid=74 rport=39216 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109334.324:20179): pid=181831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=181881 suid=74 rport=37026 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109334.324:20180): pid=181831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=181881 suid=74 rport=37026 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109334.674:20181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109334.677:20182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109334.793:20183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109334.802:20184): pid=181756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181793 suid=74 rport=39216 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109334.803:20185): pid=181756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181793 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109334.803:20186): pid=181756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109334.804:20187): pid=181756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181756 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109334.804:20188): pid=181756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109334.931:20189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109334.960:20190): pid=182011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182011 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109335.101:20191): pid=182010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182011 suid=74 rport=39228 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109335.101:20192): pid=182010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182011 suid=74 rport=39228 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109335.146:20193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109335.330:20194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109335.712:20195): pid=182010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182011 suid=74 rport=39228 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109335.713:20196): pid=182010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182011 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109335.714:20197): pid=182010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109335.715:20198): pid=182010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182010 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109335.715:20199): pid=182010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109335.870:20200): pid=182045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182045 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109336.008:20201): pid=182044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182045 suid=74 rport=43414 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109336.008:20202): pid=182044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182045 suid=74 rport=43414 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109336.610:20203): pid=182044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182045 suid=74 rport=43414 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109336.610:20204): pid=182044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182045 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109336.611:20205): pid=182044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109336.612:20206): pid=182044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182044 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109336.612:20207): pid=182044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109336.767:20208): pid=182055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109336.898:20209): pid=182054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182055 suid=74 rport=43422 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109336.899:20210): pid=182054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182055 suid=74 rport=43422 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109337.148:20211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109337.470:20212): pid=182054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182055 suid=74 rport=43422 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109337.471:20213): pid=182054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182055 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109337.471:20214): pid=182054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109337.472:20215): pid=182054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182054 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109337.472:20216): pid=182054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109337.633:20217): pid=182089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182089 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109337.676:20218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109337.803:20219): pid=182088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182089 suid=74 rport=43436 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109337.803:20220): pid=182088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182089 suid=74 rport=43436 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109338.391:20221): pid=182088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182089 suid=74 rport=43436 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109338.392:20222): pid=182088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182089 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109338.393:20223): pid=182088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109338.394:20224): pid=182088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109338.394:20225): pid=182088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109338.553:20226): pid=182099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182099 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109338.696:20227): pid=182098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182099 suid=74 rport=43438 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109338.696:20228): pid=182098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182099 suid=74 rport=43438 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109339.136:20229): pid=182101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109339.235:20230): pid=182100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=182101 suid=74 rport=37036 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109339.236:20231): pid=182100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=182101 suid=74 rport=37036 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109339.296:20232): pid=182098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182099 suid=74 rport=43438 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109339.296:20233): pid=182098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182099 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109339.297:20234): pid=182098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109339.297:20235): pid=182098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109339.297:20236): pid=182098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109339.446:20237): pid=182103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109339.578:20238): pid=182102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182103 suid=74 rport=43444 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109339.578:20239): pid=182102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182103 suid=74 rport=43444 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109340.027:20240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109340.151:20241): pid=182102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182103 suid=74 rport=43444 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109340.152:20242): pid=182102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182103 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109340.153:20243): pid=182102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109340.153:20244): pid=182102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182102 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109340.153:20245): pid=182102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109340.323:20246): pid=182142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182142 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109340.348:20247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109340.477:20248): pid=182141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182142 suid=74 rport=43460 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109340.478:20249): pid=182141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182142 suid=74 rport=43460 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109341.041:20250): pid=182141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182142 suid=74 rport=43460 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109341.041:20251): pid=182141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182142 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109341.043:20252): pid=182141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109341.043:20253): pid=182141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182141 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109341.043:20254): pid=182141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109341.194:20255): pid=182152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109341.401:20256): pid=182151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182152 suid=74 rport=43474 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109341.401:20257): pid=182151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182152 suid=74 rport=43474 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109341.927:20258): pid=182151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182152 suid=74 rport=43474 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109341.927:20259): pid=182151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182152 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109341.928:20260): pid=182151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109341.929:20261): pid=182151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182151 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109341.929:20262): pid=182151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109342.087:20263): pid=182162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109342.219:20264): pid=182161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182162 suid=74 rport=43480 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109342.219:20265): pid=182161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182162 suid=74 rport=43480 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109342.338:20266): pid=182100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182101 suid=74 rport=37036 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109342.339:20267): pid=182100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182101 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109342.339:20268): pid=182100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109342.340:20269): pid=182100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109342.340:20270): pid=182100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109342.767:20271): pid=182161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182162 suid=74 rport=43480 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109342.767:20272): pid=182161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182162 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109342.768:20273): pid=182161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109342.769:20274): pid=182161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182161 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109342.769:20275): pid=182161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109342.921:20276): pid=182172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109343.058:20277): pid=182171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182172 suid=74 rport=43490 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109343.058:20278): pid=182171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182172 suid=74 rport=43490 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109343.241:20279): pid=181831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181881 suid=74 rport=37026 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109343.243:20280): pid=181831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181881 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109343.243:20281): pid=181831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109343.243:20282): pid=181831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=181831 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109343.243:20283): pid=181831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109343.631:20284): pid=182171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182172 suid=74 rport=43490 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109343.631:20285): pid=182171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182172 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109343.631:20286): pid=182171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109343.632:20287): pid=182171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182171 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109343.632:20288): pid=182171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109343.816:20289): pid=182223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109343.957:20290): pid=182222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182223 suid=74 rport=43506 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109343.957:20291): pid=182222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182223 suid=74 rport=43506 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109344.554:20292): pid=182222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182223 suid=74 rport=43506 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109344.555:20293): pid=182222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182223 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109344.555:20294): pid=182222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109344.556:20295): pid=182222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182222 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109344.556:20296): pid=182222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109344.705:20297): pid=182464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182464 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109344.864:20298): pid=182463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182464 suid=74 rport=43514 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109344.865:20299): pid=182463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182464 suid=74 rport=43514 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109345.144:20300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109345.333:20301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109345.445:20302): pid=182463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182464 suid=74 rport=43514 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109345.445:20303): pid=182463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182464 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109345.446:20304): pid=182463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109345.447:20305): pid=182463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109345.447:20306): pid=182463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109345.539:20307): pid=182610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182610 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770109345.595:20308): pid=182629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109345.728:20309): pid=182621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182629 suid=74 rport=38168 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109345.728:20310): pid=182621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182629 suid=74 rport=38168 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109345.794:20311): pid=182606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=182610 suid=74 rport=57994 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109345.794:20312): pid=182606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=182610 suid=74 rport=57994 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109346.259:20313): pid=182621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182629 suid=74 rport=38168 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109346.260:20314): pid=182621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182629 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109346.261:20315): pid=182621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109346.261:20316): pid=182621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182621 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109346.261:20317): pid=182621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109346.412:20318): pid=182681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182681 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109346.548:20319): pid=182680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182681 suid=74 rport=38176 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109346.548:20320): pid=182680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182681 suid=74 rport=38176 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109347.090:20321): pid=182680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182681 suid=74 rport=38176 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109347.090:20322): pid=182680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182681 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109347.091:20323): pid=182680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109347.091:20324): pid=182680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109347.091:20325): pid=182680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109347.262:20326): pid=182692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182692 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109347.405:20327): pid=182691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182692 suid=74 rport=38186 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109347.405:20328): pid=182691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182692 suid=74 rport=38186 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109347.820:20329): pid=182606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182610 suid=74 rport=57994 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109347.821:20330): pid=182606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182610 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109347.822:20331): pid=182606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109347.822:20332): pid=182606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109347.823:20333): pid=182606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109348.016:20334): pid=182691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182692 suid=74 rport=38186 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109348.016:20335): pid=182691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182692 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109348.017:20336): pid=182691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109348.018:20337): pid=182691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182691 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109348.018:20338): pid=182691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109348.175:20339): pid=182702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182702 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109348.370:20340): pid=182701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182702 suid=74 rport=38196 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109348.370:20341): pid=182701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182702 suid=74 rport=38196 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109348.951:20342): pid=182701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182702 suid=74 rport=38196 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109348.951:20343): pid=182701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182702 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109348.952:20344): pid=182701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109348.953:20345): pid=182701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109348.953:20346): pid=182701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109349.120:20347): pid=182712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182712 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109349.265:20348): pid=182711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182712 suid=74 rport=38204 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109349.265:20349): pid=182711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182712 suid=74 rport=38204 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109349.820:20350): pid=182711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182712 suid=74 rport=38204 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109349.820:20351): pid=182711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182712 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109349.822:20352): pid=182711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109349.822:20353): pid=182711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182711 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109349.822:20354): pid=182711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109349.976:20355): pid=182722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182722 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109350.113:20356): pid=182721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182722 suid=74 rport=38210 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109350.113:20357): pid=182721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182722 suid=74 rport=38210 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109350.690:20358): pid=182721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182722 suid=74 rport=38210 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109350.690:20359): pid=182721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182722 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109350.691:20360): pid=182721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109350.692:20361): pid=182721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182721 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109350.692:20362): pid=182721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109350.837:20363): pid=182732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109350.964:20364): pid=182731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182732 suid=74 rport=38222 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109350.964:20365): pid=182731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182732 suid=74 rport=38222 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109351.504:20366): pid=182731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182732 suid=74 rport=38222 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109351.504:20367): pid=182731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182732 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109351.505:20368): pid=182731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109351.506:20369): pid=182731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182731 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109351.506:20370): pid=182731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109351.659:20371): pid=182734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109351.855:20372): pid=182733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182734 suid=74 rport=38232 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109351.855:20373): pid=182733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182734 suid=74 rport=38232 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109352.377:20374): pid=182733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182734 suid=74 rport=38232 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109352.377:20375): pid=182733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182734 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109352.378:20376): pid=182733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109352.379:20377): pid=182733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182733 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109352.379:20378): pid=182733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109352.535:20379): pid=182744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182744 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109352.672:20380): pid=182743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182744 suid=74 rport=38236 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109352.673:20381): pid=182743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182744 suid=74 rport=38236 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109353.253:20382): pid=182743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182744 suid=74 rport=38236 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109353.253:20383): pid=182743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182744 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109353.254:20384): pid=182743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109353.255:20385): pid=182743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109353.255:20386): pid=182743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109353.416:20387): pid=182754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182754 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109353.556:20388): pid=182753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182754 suid=74 rport=38244 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109353.557:20389): pid=182753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182754 suid=74 rport=38244 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109354.141:20390): pid=182753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182754 suid=74 rport=38244 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109354.142:20391): pid=182753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182754 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109354.142:20392): pid=182753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109354.143:20393): pid=182753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182753 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109354.144:20394): pid=182753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109354.281:20395): pid=182971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182971 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109354.409:20396): pid=182970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182971 suid=74 rport=38256 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109354.409:20397): pid=182970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=182971 suid=74 rport=38256 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109354.949:20398): pid=182970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182971 suid=74 rport=38256 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109354.949:20399): pid=182970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182971 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109354.950:20400): pid=182970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109354.950:20401): pid=182970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=182970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109354.951:20402): pid=182970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109355.106:20403): pid=183034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109355.319:20404): pid=183033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183034 suid=74 rport=38260 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109355.319:20405): pid=183033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183034 suid=74 rport=38260 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109355.887:20406): pid=183033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183034 suid=74 rport=38260 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109355.887:20407): pid=183033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183034 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109355.888:20408): pid=183033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109355.889:20409): pid=183033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183033 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109355.889:20410): pid=183033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109356.061:20411): pid=183080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183080 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109356.199:20412): pid=183079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183080 suid=74 rport=35948 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109356.199:20413): pid=183079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183080 suid=74 rport=35948 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109356.779:20414): pid=183079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183080 suid=74 rport=35948 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109356.779:20415): pid=183079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183080 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109356.780:20416): pid=183079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109356.780:20417): pid=183079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183079 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109356.780:20418): pid=183079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109356.930:20419): pid=183084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109357.062:20420): pid=183081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183084 suid=74 rport=35950 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109357.062:20421): pid=183081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183084 suid=74 rport=35950 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109357.625:20422): pid=183081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183084 suid=74 rport=35950 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109357.625:20423): pid=183081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183084 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109357.626:20424): pid=183081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109357.627:20425): pid=183081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183081 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109357.627:20426): pid=183081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109357.779:20427): pid=183168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109357.951:20428): pid=183164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183168 suid=74 rport=35962 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109357.951:20429): pid=183164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183168 suid=74 rport=35962 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109358.495:20430): pid=183164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183168 suid=74 rport=35962 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109358.496:20431): pid=183164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183168 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109358.496:20432): pid=183164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109358.497:20433): pid=183164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183164 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109358.497:20434): pid=183164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109358.639:20435): pid=183268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183268 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109358.830:20436): pid=183267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183268 suid=74 rport=35966 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109358.830:20437): pid=183267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183268 suid=74 rport=35966 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109359.390:20438): pid=183267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183268 suid=74 rport=35966 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109359.391:20439): pid=183267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183268 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109359.391:20440): pid=183267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109359.392:20441): pid=183267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183267 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109359.392:20442): pid=183267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109359.562:20443): pid=183289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183289 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109359.703:20444): pid=183288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183289 suid=74 rport=35980 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109359.704:20445): pid=183288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183289 suid=74 rport=35980 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109360.273:20446): pid=183288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183289 suid=74 rport=35980 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109360.274:20447): pid=183288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183289 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109360.274:20448): pid=183288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109360.275:20449): pid=183288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183288 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109360.275:20450): pid=183288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109360.432:20451): pid=183299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109360.574:20452): pid=183298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183299 suid=74 rport=35982 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109360.574:20453): pid=183298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183299 suid=74 rport=35982 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109361.022:20454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109361.025:20455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109361.157:20456): pid=183298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183299 suid=74 rport=35982 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109361.158:20457): pid=183298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183299 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109361.159:20458): pid=183298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109361.160:20459): pid=183298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109361.160:20460): pid=183298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109361.177:20461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109361.216:20462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109361.320:20463): pid=183346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109361.479:20464): pid=183345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183346 suid=74 rport=35986 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109361.479:20465): pid=183345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183346 suid=74 rport=35986 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109362.009:20466): pid=183345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183346 suid=74 rport=35986 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109362.009:20467): pid=183345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183346 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109362.011:20468): pid=183345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109362.011:20469): pid=183345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109362.011:20470): pid=183345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109362.201:20471): pid=183432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109362.383:20472): pid=183409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183432 suid=74 rport=35988 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109362.383:20473): pid=183409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183432 suid=74 rport=35988 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109362.880:20474): pid=183409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183432 suid=74 rport=35988 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109362.881:20475): pid=183409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183432 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109362.881:20476): pid=183409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109362.882:20477): pid=183409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109362.882:20478): pid=183409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109363.040:20479): pid=183459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109363.168:20480): pid=183458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183459 suid=74 rport=35990 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109363.169:20481): pid=183458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183459 suid=74 rport=35990 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109363.744:20482): pid=183458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183459 suid=74 rport=35990 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109363.745:20483): pid=183458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183459 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109363.746:20484): pid=183458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109363.746:20485): pid=183458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109363.747:20486): pid=183458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109363.896:20487): pid=183510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109364.032:20488): pid=183509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183510 suid=74 rport=35996 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109364.032:20489): pid=183509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183510 suid=74 rport=35996 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109364.600:20490): pid=183509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183510 suid=74 rport=35996 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109364.600:20491): pid=183509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183510 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109364.601:20492): pid=183509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109364.602:20493): pid=183509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109364.602:20494): pid=183509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109364.772:20495): pid=183686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109364.913:20496): pid=183685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183686 suid=74 rport=36002 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109364.914:20497): pid=183685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183686 suid=74 rport=36002 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109365.144:20498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109365.148:20499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109365.294:20500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109365.356:20501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109365.395:20502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109365.487:20503): pid=183685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183686 suid=74 rport=36002 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109365.488:20504): pid=183685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183686 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109365.489:20505): pid=183685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109365.490:20506): pid=183685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183685 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109365.490:20507): pid=183685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109365.503:20508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109365.643:20509): pid=183816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183816 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109365.815:20510): pid=183815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183816 suid=74 rport=32862 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109365.815:20511): pid=183815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183816 suid=74 rport=32862 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109366.439:20512): pid=183815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183816 suid=74 rport=32862 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109366.439:20513): pid=183815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183816 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109366.441:20514): pid=183815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109366.441:20515): pid=183815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183815 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109366.441:20516): pid=183815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109366.590:20517): pid=183827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183827 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770109366.601:20518): pid=183828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183828 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109366.724:20519): pid=183825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183827 suid=74 rport=32874 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109366.725:20520): pid=183825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183827 suid=74 rport=32874 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109366.875:20521): pid=183826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=183828 suid=74 rport=60122 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109366.875:20522): pid=183826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=183828 suid=74 rport=60122 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109367.276:20523): pid=183825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183827 suid=74 rport=32874 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109367.276:20524): pid=183825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183827 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109367.277:20525): pid=183825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109367.278:20526): pid=183825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183825 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109367.278:20527): pid=183825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109367.437:20528): pid=183838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109367.574:20529): pid=183837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183838 suid=74 rport=32878 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109367.574:20530): pid=183837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183838 suid=74 rport=32878 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109368.028:20531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109368.152:20532): pid=183837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183838 suid=74 rport=32878 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109368.152:20533): pid=183837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183838 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109368.153:20534): pid=183837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109368.154:20535): pid=183837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183837 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109368.154:20536): pid=183837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109368.296:20537): pid=183870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109368.430:20538): pid=183868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183870 suid=74 rport=32894 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109368.430:20539): pid=183868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183870 suid=74 rport=32894 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770109368.540:20540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109369.012:20541): pid=183868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183870 suid=74 rport=32894 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109369.013:20542): pid=183868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183870 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109369.014:20543): pid=183868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109369.014:20544): pid=183868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109369.014:20545): pid=183868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109369.203:20546): pid=183873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183873 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109369.354:20547): pid=183872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183873 suid=74 rport=32900 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109369.355:20548): pid=183872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183873 suid=74 rport=32900 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109369.629:20549): pid=183826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183828 suid=74 rport=60122 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109369.630:20550): pid=183826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183828 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109369.631:20551): pid=183826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109369.632:20552): pid=183826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183826 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109369.632:20553): pid=183826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109369.902:20554): pid=183872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183873 suid=74 rport=32900 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109369.902:20555): pid=183872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183873 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109369.903:20556): pid=183872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109369.904:20557): pid=183872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183872 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109369.904:20558): pid=183872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109370.046:20559): pid=183932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109370.180:20560): pid=183931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183932 suid=74 rport=32916 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109370.180:20561): pid=183931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=183932 suid=74 rport=32916 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109370.607:20562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109370.731:20563): pid=183931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183932 suid=74 rport=32916 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109370.732:20564): pid=183931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183932 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109370.732:20565): pid=183931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109370.733:20566): pid=183931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=183931 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109370.733:20567): pid=183931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109370.889:20568): pid=184032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109370.918:20569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109371.022:20570): pid=184031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184032 suid=74 rport=32918 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109371.022:20571): pid=184031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184032 suid=74 rport=32918 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109371.567:20572): pid=184031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184032 suid=74 rport=32918 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109371.567:20573): pid=184031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184032 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109371.568:20574): pid=184031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109371.569:20575): pid=184031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109371.569:20576): pid=184031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109371.724:20577): pid=184098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109371.860:20578): pid=184097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184098 suid=74 rport=32924 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109371.860:20579): pid=184097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184098 suid=74 rport=32924 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109372.409:20580): pid=184097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184098 suid=74 rport=32924 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109372.409:20581): pid=184097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184098 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109372.410:20582): pid=184097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109372.411:20583): pid=184097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184097 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109372.411:20584): pid=184097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109372.578:20585): pid=184119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109372.772:20586): pid=184118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184119 suid=74 rport=32938 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109372.773:20587): pid=184118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184119 suid=74 rport=32938 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109373.326:20588): pid=184118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184119 suid=74 rport=32938 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109373.326:20589): pid=184118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184119 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109373.327:20590): pid=184118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109373.328:20591): pid=184118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109373.328:20592): pid=184118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109373.485:20593): pid=184128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184128 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109373.621:20594): pid=184123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184128 suid=74 rport=32950 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109373.621:20595): pid=184123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184128 suid=74 rport=32950 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109374.193:20596): pid=184123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184128 suid=74 rport=32950 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109374.193:20597): pid=184123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184128 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109374.194:20598): pid=184123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109374.195:20599): pid=184123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184123 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109374.195:20600): pid=184123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109374.370:20601): pid=184338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184338 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109374.514:20602): pid=184337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184338 suid=74 rport=32964 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109374.514:20603): pid=184337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184338 suid=74 rport=32964 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109375.088:20604): pid=184337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184338 suid=74 rport=32964 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109375.088:20605): pid=184337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184338 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109375.089:20606): pid=184337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109375.090:20607): pid=184337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184337 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109375.090:20608): pid=184337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109375.251:20609): pid=184350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184350 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109375.387:20610): pid=184347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184350 suid=74 rport=32968 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109375.388:20611): pid=184347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184350 suid=74 rport=32968 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109375.832:20612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109375.981:20613): pid=184347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184350 suid=74 rport=32968 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109375.981:20614): pid=184347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184350 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109375.981:20615): pid=184347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109375.983:20616): pid=184347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184347 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109375.983:20617): pid=184347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109376.025:20618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109376.132:20619): pid=184452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109376.310:20620): pid=184451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184452 suid=74 rport=36354 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109376.310:20621): pid=184451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184452 suid=74 rport=36354 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109376.893:20622): pid=184451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184452 suid=74 rport=36354 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109376.893:20623): pid=184451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184452 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109376.893:20624): pid=184451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109376.894:20625): pid=184451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184451 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109376.894:20626): pid=184451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109377.045:20627): pid=184462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184462 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109377.172:20628): pid=184461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184462 suid=74 rport=36366 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109377.172:20629): pid=184461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184462 suid=74 rport=36366 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109378.434:20630): pid=184461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184462 suid=74 rport=36366 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109378.434:20631): pid=184461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184462 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109378.435:20632): pid=184461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109378.437:20633): pid=184461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184461 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109378.437:20634): pid=184461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109378.590:20635): pid=184472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184472 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109378.723:20636): pid=184471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184472 suid=74 rport=36380 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109378.724:20637): pid=184471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184472 suid=74 rport=36380 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109379.290:20638): pid=184471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184472 suid=74 rport=36380 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109379.291:20639): pid=184471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184472 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109379.292:20640): pid=184471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109379.292:20641): pid=184471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184471 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109379.292:20642): pid=184471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109379.437:20643): pid=184482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109379.564:20644): pid=184481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184482 suid=74 rport=36386 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109379.564:20645): pid=184481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184482 suid=74 rport=36386 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109380.190:20646): pid=184481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184482 suid=74 rport=36386 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109380.191:20647): pid=184481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184482 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109380.192:20648): pid=184481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109380.192:20649): pid=184481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109380.193:20650): pid=184481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109380.358:20651): pid=184492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109380.494:20652): pid=184491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184492 suid=74 rport=36396 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109380.494:20653): pid=184491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184492 suid=74 rport=36396 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109381.078:20654): pid=184491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184492 suid=74 rport=36396 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109381.078:20655): pid=184491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184492 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109381.079:20656): pid=184491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109381.079:20657): pid=184491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184491 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109381.079:20658): pid=184491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109381.231:20659): pid=184502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109381.389:20660): pid=184501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184502 suid=74 rport=36412 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109381.389:20661): pid=184501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184502 suid=74 rport=36412 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109381.931:20662): pid=184501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184502 suid=74 rport=36412 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109381.931:20663): pid=184501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184502 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109381.932:20664): pid=184501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109381.933:20665): pid=184501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109381.933:20666): pid=184501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109382.080:20667): pid=184512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184512 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109382.210:20668): pid=184511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184512 suid=74 rport=36414 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109382.210:20669): pid=184511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184512 suid=74 rport=36414 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109382.743:20670): pid=184511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184512 suid=74 rport=36414 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109382.743:20671): pid=184511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184512 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109382.744:20672): pid=184511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109382.745:20673): pid=184511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184511 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109382.745:20674): pid=184511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109382.914:20675): pid=184541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184541 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109383.067:20676): pid=184537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184541 suid=74 rport=36430 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109383.067:20677): pid=184537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184541 suid=74 rport=36430 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109383.741:20678): pid=184537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184541 suid=74 rport=36430 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109383.741:20679): pid=184537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184541 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109383.742:20680): pid=184537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109383.743:20681): pid=184537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109383.743:20682): pid=184537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109383.948:20683): pid=184683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184683 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109384.090:20684): pid=184682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184683 suid=74 rport=36438 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109384.091:20685): pid=184682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184683 suid=74 rport=36438 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109384.707:20686): pid=184682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184683 suid=74 rport=36438 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109384.708:20687): pid=184682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184683 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109384.709:20688): pid=184682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109384.710:20689): pid=184682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184682 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109384.710:20690): pid=184682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109384.860:20691): pid=184915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184915 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109384.992:20692): pid=184914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184915 suid=74 rport=36446 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109384.992:20693): pid=184914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184915 suid=74 rport=36446 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109385.550:20694): pid=184914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184915 suid=74 rport=36446 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109385.550:20695): pid=184914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184915 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109385.551:20696): pid=184914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109385.551:20697): pid=184914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184914 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109385.552:20698): pid=184914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109385.710:20699): pid=184981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109385.845:20700): pid=184980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184981 suid=74 rport=45382 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109385.846:20701): pid=184980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184981 suid=74 rport=45382 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109386.412:20702): pid=184980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184981 suid=74 rport=45382 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109386.412:20703): pid=184980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184981 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109386.413:20704): pid=184980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109386.414:20705): pid=184980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109386.414:20706): pid=184980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109386.582:20707): pid=184991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184991 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109386.723:20708): pid=184990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184991 suid=74 rport=45386 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109386.723:20709): pid=184990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=184991 suid=74 rport=45386 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109387.446:20710): pid=184990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184991 suid=74 rport=45386 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109387.446:20711): pid=184990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184991 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109387.447:20712): pid=184990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109387.448:20713): pid=184990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=184990 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109387.448:20714): pid=184990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109387.599:20715): pid=185001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185001 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109387.728:20716): pid=185000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185001 suid=74 rport=45400 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109387.728:20717): pid=185000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185001 suid=74 rport=45400 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109388.308:20718): pid=185000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185001 suid=74 rport=45400 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109388.308:20719): pid=185000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185001 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109388.309:20720): pid=185000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109388.310:20721): pid=185000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185000 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109388.310:20722): pid=185000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109388.480:20723): pid=185011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185011 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109388.623:20724): pid=185010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185011 suid=74 rport=45414 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109388.623:20725): pid=185010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185011 suid=74 rport=45414 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109389.213:20726): pid=185010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185011 suid=74 rport=45414 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109389.213:20727): pid=185010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185011 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109389.215:20728): pid=185010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109389.216:20729): pid=185010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185010 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109389.216:20730): pid=185010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109389.366:20731): pid=185021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109389.501:20732): pid=185020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185021 suid=74 rport=45420 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109389.502:20733): pid=185020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185021 suid=74 rport=45420 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109390.066:20734): pid=185020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185021 suid=74 rport=45420 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109390.067:20735): pid=185020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185021 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109390.067:20736): pid=185020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109390.068:20737): pid=185020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185020 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109390.068:20738): pid=185020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109390.226:20739): pid=185031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109390.393:20740): pid=185030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185031 suid=74 rport=45434 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109390.394:20741): pid=185030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185031 suid=74 rport=45434 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109391.003:20742): pid=185030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185031 suid=74 rport=45434 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109391.003:20743): pid=185030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185031 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109391.004:20744): pid=185030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109391.005:20745): pid=185030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109391.005:20746): pid=185030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109391.148:20747): pid=185041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185041 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109391.280:20748): pid=185040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185041 suid=74 rport=45450 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109391.280:20749): pid=185040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185041 suid=74 rport=45450 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109391.705:20750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109391.709:20751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109391.825:20752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109391.828:20753): pid=185040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185041 suid=74 rport=45450 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109391.829:20754): pid=185040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185041 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109391.830:20755): pid=185040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109391.831:20756): pid=185040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185040 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109391.831:20757): pid=185040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109391.962:20758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109391.993:20759): pid=185088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109392.127:20760): pid=185087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185088 suid=74 rport=45464 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109392.127:20761): pid=185087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185088 suid=74 rport=45464 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109392.712:20762): pid=185087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185088 suid=74 rport=45464 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109392.712:20763): pid=185087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185088 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109392.713:20764): pid=185087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109392.714:20765): pid=185087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109392.714:20766): pid=185087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109392.874:20767): pid=185090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109393.012:20768): pid=185089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185090 suid=74 rport=45472 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109393.012:20769): pid=185089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185090 suid=74 rport=45472 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109393.587:20770): pid=185089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185090 suid=74 rport=45472 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109393.588:20771): pid=185089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185090 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109393.589:20772): pid=185089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109393.589:20773): pid=185089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185089 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109393.589:20774): pid=185089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109393.732:20775): pid=185100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109393.884:20776): pid=185099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185100 suid=74 rport=45486 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109393.884:20777): pid=185099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185100 suid=74 rport=45486 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109394.477:20778): pid=185099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185100 suid=74 rport=45486 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109394.477:20779): pid=185099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185100 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109394.478:20780): pid=185099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109394.479:20781): pid=185099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185099 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109394.479:20782): pid=185099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109394.645:20783): pid=185317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185317 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109394.780:20784): pid=185316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185317 suid=74 rport=45488 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109394.780:20785): pid=185316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185317 suid=74 rport=45488 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109395.342:20786): pid=185316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185317 suid=74 rport=45488 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109395.342:20787): pid=185316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185317 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109395.343:20788): pid=185316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109395.344:20789): pid=185316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185316 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109395.344:20790): pid=185316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109395.361:20791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109395.478:20792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109395.500:20793): pid=185355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185355 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109395.520:20794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109395.535:20795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109395.636:20796): pid=185346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185355 suid=74 rport=52204 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109395.636:20797): pid=185346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185355 suid=74 rport=52204 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770109395.681:20798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109395.690:20799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109396.218:20800): pid=185346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185355 suid=74 rport=52204 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109396.218:20801): pid=185346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185355 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109396.219:20802): pid=185346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109396.220:20803): pid=185346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109396.220:20804): pid=185346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109396.377:20805): pid=185506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185506 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109396.521:20806): pid=185505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185506 suid=74 rport=52218 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109396.522:20807): pid=185505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185506 suid=74 rport=52218 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109397.041:20808): pid=185505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185506 suid=74 rport=52218 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109397.042:20809): pid=185505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185506 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109397.042:20810): pid=185505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109397.043:20811): pid=185505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109397.043:20812): pid=185505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109397.205:20813): pid=185577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109397.379:20814): pid=185576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185577 suid=74 rport=52224 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109397.379:20815): pid=185576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185577 suid=74 rport=52224 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109397.932:20816): pid=185576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185577 suid=74 rport=52224 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109397.932:20817): pid=185576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185577 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109397.933:20818): pid=185576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109397.934:20819): pid=185576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109397.934:20820): pid=185576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109398.094:20821): pid=185642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185642 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109398.230:20822): pid=185634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185642 suid=74 rport=52240 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109398.230:20823): pid=185634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185642 suid=74 rport=52240 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109398.685:20824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109398.822:20825): pid=185634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185642 suid=74 rport=52240 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109398.822:20826): pid=185634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185642 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109398.823:20827): pid=185634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109398.824:20828): pid=185634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185634 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109398.824:20829): pid=185634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109398.998:20830): pid=185679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185679 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109399.139:20831): pid=185678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185679 suid=74 rport=52254 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109399.139:20832): pid=185678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185679 suid=74 rport=52254 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770109399.188:20833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109399.733:20834): pid=185678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185679 suid=74 rport=52254 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109399.733:20835): pid=185678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185679 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109399.734:20836): pid=185678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109399.735:20837): pid=185678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185678 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109399.735:20838): pid=185678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109399.885:20839): pid=185690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109400.020:20840): pid=185689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185690 suid=74 rport=52260 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109400.021:20841): pid=185689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185690 suid=74 rport=52260 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109400.367:20842): pid=185700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185700 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770109400.627:20843): pid=185689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185690 suid=74 rport=52260 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109400.628:20844): pid=185689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185690 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109400.628:20845): pid=185699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=185700 suid=74 rport=54556 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109400.628:20846): pid=185699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=185700 suid=74 rport=54556 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109400.629:20847): pid=185689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109400.629:20848): pid=185689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185689 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109400.630:20849): pid=185689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109400.838:20850): pid=185702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185702 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109400.987:20851): pid=185701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185702 suid=74 rport=52274 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109400.987:20852): pid=185701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185702 suid=74 rport=52274 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109401.141:20853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109401.514:20854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109401.522:20855): pid=185701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185702 suid=74 rport=52274 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109401.523:20856): pid=185701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185702 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109401.524:20857): pid=185701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109401.525:20858): pid=185701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109401.525:20859): pid=185701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109401.688:20860): pid=185742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109401.827:20861): pid=185741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185742 suid=74 rport=52278 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109401.827:20862): pid=185741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185742 suid=74 rport=52278 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109402.406:20863): pid=185741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185742 suid=74 rport=52278 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109402.406:20864): pid=185741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185742 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109402.407:20865): pid=185741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109402.408:20866): pid=185741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185741 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109402.408:20867): pid=185741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109402.564:20868): pid=185752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770109402.635:20869): pid=185699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185700 suid=74 rport=54556 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109402.635:20870): pid=185699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185700 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109402.636:20871): pid=185699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109402.637:20872): pid=185699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109402.637:20873): pid=185699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109402.703:20874): pid=185751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185752 suid=74 rport=52286 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109402.703:20875): pid=185751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185752 suid=74 rport=52286 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109403.269:20876): pid=185751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185752 suid=74 rport=52286 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109403.270:20877): pid=185751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185752 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109403.271:20878): pid=185751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109403.271:20879): pid=185751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185751 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109403.271:20880): pid=185751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109403.437:20881): pid=185762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109403.579:20882): pid=185761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185762 suid=74 rport=52288 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109403.579:20883): pid=185761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185762 suid=74 rport=52288 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109404.177:20884): pid=185761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185762 suid=74 rport=52288 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109404.177:20885): pid=185761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185762 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109404.178:20886): pid=185761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109404.179:20887): pid=185761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185761 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109404.179:20888): pid=185761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109404.363:20889): pid=185815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185815 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109404.527:20890): pid=185808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185815 suid=74 rport=52292 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109404.528:20891): pid=185808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185815 suid=74 rport=52292 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109405.093:20892): pid=185808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185815 suid=74 rport=52292 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109405.094:20893): pid=185808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185815 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109405.095:20894): pid=185808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109405.095:20895): pid=185808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185808 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109405.095:20896): pid=185808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109405.235:20897): pid=185981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109405.362:20898): pid=185980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185981 suid=74 rport=52304 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109405.362:20899): pid=185980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=185981 suid=74 rport=52304 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109405.954:20900): pid=185980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185981 suid=74 rport=52304 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109405.954:20901): pid=185980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185981 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109405.955:20902): pid=185980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109405.956:20903): pid=185980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=185980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109405.956:20904): pid=185980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109406.119:20905): pid=186044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186044 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1770109406.151:20906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109406.267:20907): pid=186043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186044 suid=74 rport=57462 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109406.267:20908): pid=186043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186044 suid=74 rport=57462 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770109406.358:20909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109406.837:20910): pid=186043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186044 suid=74 rport=57462 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109406.839:20911): pid=186043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186044 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109406.839:20912): pid=186043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109406.840:20913): pid=186043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186043 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109406.840:20914): pid=186043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109407.003:20915): pid=186094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186094 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109407.142:20916): pid=186093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186094 suid=74 rport=57468 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109407.142:20917): pid=186093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186094 suid=74 rport=57468 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109407.804:20918): pid=186093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186094 suid=74 rport=57468 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109407.805:20919): pid=186093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186094 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109407.806:20920): pid=186093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109407.807:20921): pid=186093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186093 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109407.807:20922): pid=186093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109407.956:20923): pid=186104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186104 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109408.085:20924): pid=186103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186104 suid=74 rport=57470 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109408.085:20925): pid=186103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186104 suid=74 rport=57470 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109408.619:20926): pid=186103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186104 suid=74 rport=57470 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109408.619:20927): pid=186103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186104 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109408.620:20928): pid=186103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109408.620:20929): pid=186103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109408.620:20930): pid=186103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109408.790:20931): pid=186114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109408.929:20932): pid=186113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186114 suid=74 rport=57476 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109408.929:20933): pid=186113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186114 suid=74 rport=57476 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109409.503:20934): pid=186113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186114 suid=74 rport=57476 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109409.503:20935): pid=186113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186114 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109409.504:20936): pid=186113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109409.504:20937): pid=186113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186113 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109409.504:20938): pid=186113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109409.675:20939): pid=186173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109409.819:20940): pid=186172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186173 suid=74 rport=57478 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109409.819:20941): pid=186172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186173 suid=74 rport=57478 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109410.497:20942): pid=186172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186173 suid=74 rport=57478 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109410.497:20943): pid=186172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186173 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109410.497:20944): pid=186172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109410.498:20945): pid=186172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109410.498:20946): pid=186172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109410.659:20947): pid=186244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109410.797:20948): pid=186243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186244 suid=74 rport=57488 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109410.797:20949): pid=186243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186244 suid=74 rport=57488 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109411.520:20950): pid=186243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186244 suid=74 rport=57488 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109411.521:20951): pid=186243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186244 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109411.522:20952): pid=186243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109411.522:20953): pid=186243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109411.522:20954): pid=186243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109411.683:20955): pid=186315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186315 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109411.819:20956): pid=186314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186315 suid=74 rport=57490 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109411.819:20957): pid=186314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186315 suid=74 rport=57490 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109412.403:20958): pid=186314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186315 suid=74 rport=57490 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109412.403:20959): pid=186314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186315 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109412.404:20960): pid=186314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109412.405:20961): pid=186314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186314 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109412.405:20962): pid=186314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109412.566:20963): pid=186331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186331 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109412.705:20964): pid=186330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186331 suid=74 rport=57500 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109412.705:20965): pid=186330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186331 suid=74 rport=57500 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109413.215:20966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109413.215:20967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109413.302:20968): pid=186330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186331 suid=74 rport=57500 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109413.303:20969): pid=186330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186331 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109413.303:20970): pid=186330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109413.304:20971): pid=186330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186330 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109413.305:20972): pid=186330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109413.469:20973): pid=186335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109413.603:20974): pid=186334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186335 suid=74 rport=57506 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109413.603:20975): pid=186334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186335 suid=74 rport=57506 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109414.167:20976): pid=186334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186335 suid=74 rport=57506 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109414.167:20977): pid=186334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186335 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109414.168:20978): pid=186334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109414.169:20979): pid=186334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186334 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109414.169:20980): pid=186334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109414.331:20981): pid=186388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186388 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109414.462:20982): pid=186387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186388 suid=74 rport=57522 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109414.462:20983): pid=186387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186388 suid=74 rport=57522 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109415.174:20984): pid=186387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186388 suid=74 rport=57522 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109415.174:20985): pid=186387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186388 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109415.175:20986): pid=186387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109415.176:20987): pid=186387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186387 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109415.176:20988): pid=186387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109415.337:20989): pid=186562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186562 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109415.484:20990): pid=186561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186562 suid=74 rport=57532 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109415.484:20991): pid=186561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186562 suid=74 rport=57532 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109416.063:20992): pid=186561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186562 suid=74 rport=57532 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109416.063:20993): pid=186561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186562 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109416.063:20994): pid=186561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109416.064:20995): pid=186561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109416.064:20996): pid=186561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109416.345:20997): pid=186661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186661 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109416.478:20998): pid=186660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186661 suid=74 rport=47618 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109416.478:20999): pid=186660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186661 suid=74 rport=47618 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109417.035:21000): pid=186660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186661 suid=74 rport=47618 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109417.036:21001): pid=186660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186661 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109417.037:21002): pid=186660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109417.037:21003): pid=186660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186660 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109417.038:21004): pid=186660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109417.198:21005): pid=186671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109417.349:21006): pid=186670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186671 suid=74 rport=47630 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109417.349:21007): pid=186670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186671 suid=74 rport=47630 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109417.938:21008): pid=186670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186671 suid=74 rport=47630 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109417.939:21009): pid=186670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186671 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109417.940:21010): pid=186670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109417.940:21011): pid=186670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109417.941:21012): pid=186670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109418.183:21013): pid=186681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186681 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109418.365:21014): pid=186680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186681 suid=74 rport=47632 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109418.365:21015): pid=186680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186681 suid=74 rport=47632 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109418.864:21016): pid=186680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186681 suid=74 rport=47632 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109418.864:21017): pid=186680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186681 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109418.865:21018): pid=186680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109418.866:21019): pid=186680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109418.866:21020): pid=186680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109419.021:21021): pid=186691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186691 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109419.151:21022): pid=186690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186691 suid=74 rport=47638 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109419.151:21023): pid=186690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186691 suid=74 rport=47638 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109419.709:21024): pid=186690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186691 suid=74 rport=47638 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109419.709:21025): pid=186690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186691 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109419.710:21026): pid=186690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109419.711:21027): pid=186690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109419.711:21028): pid=186690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109419.857:21029): pid=186701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109419.986:21030): pid=186700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186701 suid=74 rport=47640 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109419.986:21031): pid=186700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186701 suid=74 rport=47640 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109420.525:21032): pid=186700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186701 suid=74 rport=47640 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109420.526:21033): pid=186700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186701 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109420.527:21034): pid=186700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109420.527:21035): pid=186700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186700 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109420.527:21036): pid=186700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109420.708:21037): pid=186703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186703 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109420.850:21038): pid=186702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186703 suid=74 rport=47654 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109420.850:21039): pid=186702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186703 suid=74 rport=47654 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109421.448:21040): pid=186702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186703 suid=74 rport=47654 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109421.448:21041): pid=186702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186703 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109421.449:21042): pid=186702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109421.449:21043): pid=186702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186702 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109421.450:21044): pid=186702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109421.623:21045): pid=186713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186713 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109421.812:21046): pid=186712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186713 suid=74 rport=47658 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109421.813:21047): pid=186712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186713 suid=74 rport=47658 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109422.119:21048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109422.124:21049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109422.299:21050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109422.302:21051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109422.342:21052): pid=186712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186713 suid=74 rport=47658 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109422.342:21053): pid=186712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186713 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109422.343:21054): pid=186712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109422.344:21055): pid=186712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186712 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109422.344:21056): pid=186712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109422.500:21057): pid=186894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109422.651:21058): pid=186888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186894 suid=74 rport=47668 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109422.651:21059): pid=186888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186894 suid=74 rport=47668 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109423.264:21060): pid=186888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186894 suid=74 rport=47668 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109423.265:21061): pid=186888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186894 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109423.266:21062): pid=186888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109423.267:21063): pid=186888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109423.267:21064): pid=186888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109423.432:21065): pid=186942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109423.572:21066): pid=186934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186942 suid=74 rport=47684 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109423.572:21067): pid=186934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=186942 suid=74 rport=47684 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109424.160:21068): pid=186934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186942 suid=74 rport=47684 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109424.160:21069): pid=186934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186942 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109424.161:21070): pid=186934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109424.162:21071): pid=186934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=186934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109424.162:21072): pid=186934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109424.308:21073): pid=187088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109424.445:21074): pid=187087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187088 suid=74 rport=47700 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109424.445:21075): pid=187087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187088 suid=74 rport=47700 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109425.011:21076): pid=187087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=187088 suid=74 rport=47700 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109425.012:21077): pid=187087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187088 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109425.013:21078): pid=187087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109425.013:21079): pid=187087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109425.014:21080): pid=187087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109425.205:21081): pid=187272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187272 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109425.377:21082): pid=187271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187272 suid=74 rport=47710 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109425.377:21083): pid=187271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187272 suid=74 rport=47710 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109425.737:21084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109425.740:21085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109425.744:21086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109425.858:21087): pid=187271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=187272 suid=74 rport=47710 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109425.859:21088): pid=187271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187272 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109425.860:21089): pid=187271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109425.860:21090): pid=187271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187271 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109425.860:21091): pid=187271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109425.963:21092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109425.976:21093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109425.991:21094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109426.042:21095): pid=187402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187402 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109426.194:21096): pid=187401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187402 suid=74 rport=33030 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109426.194:21097): pid=187401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187402 suid=74 rport=33030 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109426.800:21098): pid=187401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=187402 suid=74 rport=33030 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109426.801:21099): pid=187401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187402 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109426.802:21100): pid=187401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109426.802:21101): pid=187401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109426.803:21102): pid=187401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109426.968:21103): pid=187405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187405 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770109426.982:21104): pid=187413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187413 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109427.108:21105): pid=187404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187405 suid=74 rport=33038 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109427.108:21106): pid=187404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187405 suid=74 rport=33038 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109427.225:21107): pid=187403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=187413 suid=74 rport=55438 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109427.225:21108): pid=187403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=187413 suid=74 rport=55438 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109427.677:21109): pid=187404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=187405 suid=74 rport=33038 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109427.677:21110): pid=187404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187405 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109427.679:21111): pid=187404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109427.680:21112): pid=187404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109427.680:21113): pid=187404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109427.826:21114): pid=187416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187416 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109427.957:21115): pid=187415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187416 suid=74 rport=33040 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109427.957:21116): pid=187415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187416 suid=74 rport=33040 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109428.516:21117): pid=187415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=187416 suid=74 rport=33040 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109428.516:21118): pid=187415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187416 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109428.517:21119): pid=187415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109428.518:21120): pid=187415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109428.518:21121): pid=187415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109428.677:21122): pid=187426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109428.874:21123): pid=187425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187426 suid=74 rport=33052 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109428.874:21124): pid=187425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187426 suid=74 rport=33052 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109429.324:21125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109429.447:21126): pid=187425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=187426 suid=74 rport=33052 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109429.448:21127): pid=187425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187426 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109429.448:21128): pid=187425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109429.449:21129): pid=187425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109429.450:21130): pid=187425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109429.605:21131): pid=187458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109429.737:21132): pid=187457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187458 suid=74 rport=33064 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109429.737:21133): pid=187457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187458 suid=74 rport=33064 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770109429.834:21134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109430.305:21135): pid=187457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=187458 suid=74 rport=33064 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109430.306:21136): pid=187457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187458 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109430.307:21137): pid=187457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109430.307:21138): pid=187457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109430.308:21139): pid=187457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109430.501:21140): pid=187469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187469 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109430.641:21141): pid=187468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187469 suid=74 rport=33070 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109430.642:21142): pid=187468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187469 suid=74 rport=33070 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109431.266:21143): pid=187468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=187469 suid=74 rport=33070 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109431.267:21144): pid=187468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187469 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109431.268:21145): pid=187468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109431.268:21146): pid=187468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187468 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109431.268:21147): pid=187468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109431.411:21148): pid=187479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187479 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109431.538:21149): pid=187478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187479 suid=74 rport=33072 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109431.538:21150): pid=187478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187479 suid=74 rport=33072 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109431.968:21151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109432.068:21152): pid=187403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=187413 suid=74 rport=55438 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109432.068:21153): pid=187403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187413 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109432.069:21154): pid=187403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109432.070:21155): pid=187403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187403 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109432.070:21156): pid=187403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109432.131:21157): pid=187478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=187479 suid=74 rport=33072 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109432.132:21158): pid=187478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187479 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109432.133:21159): pid=187478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109432.133:21160): pid=187478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187478 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109432.133:21161): pid=187478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109432.299:21162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109432.343:21163): pid=187518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109432.446:21164): pid=187517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187518 suid=74 rport=33088 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109432.447:21165): pid=187517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187518 suid=74 rport=33088 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109433.010:21166): pid=187517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=187518 suid=74 rport=33088 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109433.011:21167): pid=187517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187518 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109433.012:21168): pid=187517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109433.012:21169): pid=187517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187517 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109433.012:21170): pid=187517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109433.154:21171): pid=187528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187528 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109433.286:21172): pid=187526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187528 suid=74 rport=33098 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109433.286:21173): pid=187526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187528 suid=74 rport=33098 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109433.881:21174): pid=187526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=187528 suid=74 rport=33098 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109433.882:21175): pid=187526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187528 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109433.883:21176): pid=187526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109433.883:21177): pid=187526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109433.883:21178): pid=187526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109434.030:21179): pid=187530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187530 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109434.159:21180): pid=187529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187530 suid=74 rport=33106 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109434.160:21181): pid=187529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187530 suid=74 rport=33106 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109434.707:21182): pid=187529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=187530 suid=74 rport=33106 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109434.707:21183): pid=187529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187530 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109434.708:21184): pid=187529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109434.709:21185): pid=187529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109434.709:21186): pid=187529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109434.880:21187): pid=187747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187747 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109435.026:21188): pid=187746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187747 suid=74 rport=33120 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109435.026:21189): pid=187746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187747 suid=74 rport=33120 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109435.615:21190): pid=187746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=187747 suid=74 rport=33120 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109435.615:21191): pid=187746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187747 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109435.616:21192): pid=187746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109435.616:21193): pid=187746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109435.616:21194): pid=187746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109435.802:21195): pid=187806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187806 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109435.941:21196): pid=187805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187806 suid=74 rport=38856 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109435.941:21197): pid=187805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187806 suid=74 rport=38856 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109436.482:21198): pid=187805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=187806 suid=74 rport=38856 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109436.482:21199): pid=187805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187806 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109436.483:21200): pid=187805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109436.484:21201): pid=187805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109436.484:21202): pid=187805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109436.502:21203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109436.650:21204): pid=187967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109436.690:21205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109436.788:21206): pid=187962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187967 suid=74 rport=38872 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109436.788:21207): pid=187962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=187967 suid=74 rport=38872 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109437.358:21208): pid=187962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=187967 suid=74 rport=38872 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109437.360:21209): pid=187962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187967 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109437.361:21210): pid=187962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109437.362:21211): pid=187962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=187962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109437.362:21212): pid=187962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109437.508:21213): pid=188033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188033 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109437.643:21214): pid=188032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188033 suid=74 rport=38884 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109437.644:21215): pid=188032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188033 suid=74 rport=38884 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109438.215:21216): pid=188032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188033 suid=74 rport=38884 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109438.216:21217): pid=188032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188033 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109438.216:21218): pid=188032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109438.217:21219): pid=188032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109438.217:21220): pid=188032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109438.369:21221): pid=188043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188043 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109438.503:21222): pid=188042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188043 suid=74 rport=38898 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109438.503:21223): pid=188042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188043 suid=74 rport=38898 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109439.060:21224): pid=188042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188043 suid=74 rport=38898 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109439.062:21225): pid=188042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188043 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109439.062:21226): pid=188042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109439.063:21227): pid=188042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109439.063:21228): pid=188042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109439.223:21229): pid=188056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188056 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109439.369:21230): pid=188055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188056 suid=74 rport=38914 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109439.369:21231): pid=188055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188056 suid=74 rport=38914 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109439.371:21232): pid=188066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109439.627:21233): pid=188057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=188066 suid=74 rport=35882 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109439.627:21234): pid=188057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=188066 suid=74 rport=35882 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109439.903:21235): pid=188055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188056 suid=74 rport=38914 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109439.904:21236): pid=188055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188056 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109439.905:21237): pid=188055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109439.905:21238): pid=188055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109439.905:21239): pid=188055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109440.054:21240): pid=188068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188068 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109440.183:21241): pid=188067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188068 suid=74 rport=38918 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109440.183:21242): pid=188067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188068 suid=74 rport=38918 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109440.725:21243): pid=188067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188068 suid=74 rport=38918 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109440.726:21244): pid=188067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188068 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109440.728:21245): pid=188067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109440.729:21246): pid=188067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188067 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109440.729:21247): pid=188067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109440.885:21248): pid=188078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188078 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109441.021:21249): pid=188077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188078 suid=74 rport=38922 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109441.021:21250): pid=188077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188078 suid=74 rport=38922 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109441.591:21251): pid=188077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188078 suid=74 rport=38922 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109441.591:21252): pid=188077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188078 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109441.593:21253): pid=188077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109441.593:21254): pid=188077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188077 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109441.593:21255): pid=188077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109441.737:21256): pid=188088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109441.866:21257): pid=188087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188088 suid=74 rport=38936 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109441.866:21258): pid=188087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188088 suid=74 rport=38936 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109442.195:21259): pid=188057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188066 suid=74 rport=35882 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109442.196:21260): pid=188057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188066 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109442.196:21261): pid=188057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109442.197:21262): pid=188057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188057 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109442.197:21263): pid=188057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="ftp" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109442.402:21264): pid=188087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188088 suid=74 rport=38936 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109442.403:21265): pid=188087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188088 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109442.403:21266): pid=188087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109442.404:21267): pid=188087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109442.404:21268): pid=188087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109442.575:21269): pid=188098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109442.728:21270): pid=188097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188098 suid=74 rport=38948 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109442.728:21271): pid=188097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188098 suid=74 rport=38948 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109443.301:21272): pid=188097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188098 suid=74 rport=38948 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109443.301:21273): pid=188097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188098 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109443.302:21274): pid=188097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109443.303:21275): pid=188097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188097 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109443.303:21276): pid=188097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109443.476:21277): pid=188108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188108 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109443.610:21278): pid=188107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188108 suid=74 rport=38960 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109443.610:21279): pid=188107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188108 suid=74 rport=38960 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109444.163:21280): pid=188107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188108 suid=74 rport=38960 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109444.163:21281): pid=188107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188108 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109444.165:21282): pid=188107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109444.165:21283): pid=188107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188107 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109444.165:21284): pid=188107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109444.326:21285): pid=188153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188153 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109444.462:21286): pid=188152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188153 suid=74 rport=38968 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109444.462:21287): pid=188152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188153 suid=74 rport=38968 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109445.027:21288): pid=188152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188153 suid=74 rport=38968 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109445.027:21289): pid=188152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188153 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109445.028:21290): pid=188152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109445.029:21291): pid=188152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109445.029:21292): pid=188152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109445.184:21293): pid=188327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188327 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109445.330:21294): pid=188326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188327 suid=74 rport=38976 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109445.330:21295): pid=188326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188327 suid=74 rport=38976 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109445.893:21296): pid=188326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188327 suid=74 rport=38976 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109445.893:21297): pid=188326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188327 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109445.894:21298): pid=188326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109445.895:21299): pid=188326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188326 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109445.895:21300): pid=188326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109446.049:21301): pid=188337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188337 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109446.233:21302): pid=188336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188337 suid=74 rport=53674 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109446.233:21303): pid=188336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188337 suid=74 rport=53674 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109446.765:21304): pid=188336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188337 suid=74 rport=53674 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109446.765:21305): pid=188336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188337 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109446.766:21306): pid=188336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109446.767:21307): pid=188336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188336 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109446.767:21308): pid=188336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109446.925:21309): pid=188400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188400 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109447.063:21310): pid=188399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188400 suid=74 rport=53684 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109447.063:21311): pid=188399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188400 suid=74 rport=53684 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109447.664:21312): pid=188399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188400 suid=74 rport=53684 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109447.665:21313): pid=188399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188400 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109447.665:21314): pid=188399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109447.666:21315): pid=188399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109447.666:21316): pid=188399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109447.837:21317): pid=188410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109447.979:21318): pid=188409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188410 suid=74 rport=53694 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109447.979:21319): pid=188409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188410 suid=74 rport=53694 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109448.566:21320): pid=188409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188410 suid=74 rport=53694 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109448.566:21321): pid=188409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188410 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109448.567:21322): pid=188409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109448.568:21323): pid=188409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109448.568:21324): pid=188409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109448.725:21325): pid=188420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188420 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109448.868:21326): pid=188419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188420 suid=74 rport=53702 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109448.868:21327): pid=188419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188420 suid=74 rport=53702 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109449.434:21328): pid=188419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188420 suid=74 rport=53702 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109449.434:21329): pid=188419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188420 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109449.435:21330): pid=188419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109449.435:21331): pid=188419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188419 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109449.435:21332): pid=188419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109449.662:21333): pid=188479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188479 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109449.775:21334): pid=188470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188479 suid=74 rport=53718 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109449.775:21335): pid=188470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188479 suid=74 rport=53718 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109450.322:21336): pid=188470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188479 suid=74 rport=53718 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109450.323:21337): pid=188470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188479 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109450.323:21338): pid=188470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109450.324:21339): pid=188470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109450.324:21340): pid=188470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109450.472:21341): pid=188542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188542 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109450.602:21342): pid=188541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188542 suid=74 rport=53722 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109450.603:21343): pid=188541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188542 suid=74 rport=53722 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109451.153:21344): pid=188541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188542 suid=74 rport=53722 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109451.154:21345): pid=188541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188542 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109451.154:21346): pid=188541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109451.155:21347): pid=188541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188541 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109451.155:21348): pid=188541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109451.309:21349): pid=188608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188608 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109451.442:21350): pid=188607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188608 suid=74 rport=53730 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109451.442:21351): pid=188607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188608 suid=74 rport=53730 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109452.035:21352): pid=188607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188608 suid=74 rport=53730 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109452.036:21353): pid=188607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188608 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109452.037:21354): pid=188607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109452.037:21355): pid=188607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188607 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109452.037:21356): pid=188607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109452.194:21357): pid=188629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109452.343:21358): pid=188628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188629 suid=74 rport=53744 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109452.343:21359): pid=188628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188629 suid=74 rport=53744 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109452.775:21360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109452.778:21361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109452.931:21362): pid=188628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188629 suid=74 rport=53744 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109452.932:21363): pid=188628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188629 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109452.933:21364): pid=188628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109452.933:21365): pid=188628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188628 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109452.934:21366): pid=188628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109452.993:21367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109453.002:21368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109453.153:21369): pid=188677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188677 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109453.320:21370): pid=188676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188677 suid=74 rport=53754 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109453.320:21371): pid=188676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188677 suid=74 rport=53754 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109453.837:21372): pid=188676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188677 suid=74 rport=53754 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109453.837:21373): pid=188676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188677 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109453.838:21374): pid=188676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109453.839:21375): pid=188676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188676 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109453.839:21376): pid=188676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109454.002:21377): pid=188687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188687 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109454.145:21378): pid=188686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188687 suid=74 rport=53764 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109454.145:21379): pid=188686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188687 suid=74 rport=53764 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109454.738:21380): pid=188686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188687 suid=74 rport=53764 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109454.739:21381): pid=188686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188687 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109454.740:21382): pid=188686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109454.741:21383): pid=188686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109454.741:21384): pid=188686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109454.898:21385): pid=188807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188807 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109455.036:21386): pid=188777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188807 suid=74 rport=53766 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109455.036:21387): pid=188777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188807 suid=74 rport=53766 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109455.612:21388): pid=188777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188807 suid=74 rport=53766 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109455.613:21389): pid=188777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188807 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109455.614:21390): pid=188777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109455.614:21391): pid=188777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109455.615:21392): pid=188777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109455.778:21393): pid=188914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188914 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770109455.831:21394): pid=188916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188916 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109455.919:21395): pid=188909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188914 suid=74 rport=47704 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109455.919:21396): pid=188909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=188914 suid=74 rport=47704 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109456.145:21397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109456.148:21398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109456.152:21399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109456.352:21400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109456.388:21401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109456.399:21402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109456.560:21403): pid=188909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188914 suid=74 rport=47704 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109456.560:21404): pid=188909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188914 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109456.562:21405): pid=188909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109456.562:21406): pid=188909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188909 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109456.562:21407): pid=188909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109456.796:21408): pid=189041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189041 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109456.886:21409): pid=189033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189041 suid=74 rport=47708 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109456.887:21410): pid=189033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189041 suid=74 rport=47708 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109457.450:21411): pid=189033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189041 suid=74 rport=47708 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109457.450:21412): pid=189033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189041 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109457.451:21413): pid=189033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109457.452:21414): pid=189033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189033 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109457.452:21415): pid=189033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109457.605:21416): pid=189044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189044 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109457.743:21417): pid=189043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189044 suid=74 rport=47712 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109457.743:21418): pid=189043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189044 suid=74 rport=47712 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109458.310:21419): pid=189043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189044 suid=74 rport=47712 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109458.311:21420): pid=189043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189044 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109458.312:21421): pid=189043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109458.312:21422): pid=189043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189043 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109458.312:21423): pid=189043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109458.459:21424): pid=189054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189054 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109458.591:21425): pid=189053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189054 suid=74 rport=47716 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109458.591:21426): pid=189053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189054 suid=74 rport=47716 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109459.137:21427): pid=189053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189054 suid=74 rport=47716 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109459.138:21428): pid=189053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189054 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109459.139:21429): pid=189053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109459.139:21430): pid=189053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189053 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109459.139:21431): pid=189053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109459.299:21432): pid=189064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109459.434:21433): pid=189063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189064 suid=74 rport=47726 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109459.435:21434): pid=189063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189064 suid=74 rport=47726 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109459.871:21435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109460.044:21436): pid=189063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189064 suid=74 rport=47726 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109460.044:21437): pid=189063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189064 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109460.045:21438): pid=189063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109460.046:21439): pid=189063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109460.046:21440): pid=189063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109460.247:21441): pid=189097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189097 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109460.368:21442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109460.369:21443): pid=189096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189097 suid=74 rport=47730 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109460.369:21444): pid=189096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189097 suid=74 rport=47730 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109460.964:21445): pid=189096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189097 suid=74 rport=47730 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109460.964:21446): pid=189096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189097 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109460.965:21447): pid=189096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109460.966:21448): pid=189096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109460.966:21449): pid=189096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109461.139:21450): pid=189107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189107 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109461.280:21451): pid=189106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189107 suid=74 rport=47742 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109461.280:21452): pid=189106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189107 suid=74 rport=47742 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109461.870:21453): pid=189106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189107 suid=74 rport=47742 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109461.870:21454): pid=189106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189107 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109461.871:21455): pid=189106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109461.872:21456): pid=189106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109461.872:21457): pid=189106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109462.027:21458): pid=189117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189117 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109462.186:21459): pid=189116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189117 suid=74 rport=47750 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109462.186:21460): pid=189116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189117 suid=74 rport=47750 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109462.602:21461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109462.729:21462): pid=189116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189117 suid=74 rport=47750 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109462.730:21463): pid=189116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189117 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109462.730:21464): pid=189116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109462.731:21465): pid=189116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109462.731:21466): pid=189116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109462.879:21467): pid=189199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189199 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109462.943:21468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109463.011:21469): pid=189196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189199 suid=74 rport=47756 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109463.011:21470): pid=189196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189199 suid=74 rport=47756 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109463.670:21471): pid=189196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189199 suid=74 rport=47756 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109463.671:21472): pid=189196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189199 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109463.671:21473): pid=189196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109463.672:21474): pid=189196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189196 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109463.672:21475): pid=189196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109463.869:21476): pid=189283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189283 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109464.013:21477): pid=189274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189283 suid=74 rport=47766 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109464.013:21478): pid=189274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189283 suid=74 rport=47766 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109464.336:21479): pid=188905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=188916 suid=74 rport=43690 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109464.336:21480): pid=188905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=188916 suid=74 rport=43690 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109464.659:21481): pid=189274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189283 suid=74 rport=47766 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109464.660:21482): pid=189274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189283 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109464.660:21483): pid=189274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109464.661:21484): pid=189274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189274 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109464.661:21485): pid=189274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109464.822:21486): pid=189386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109464.956:21487): pid=189385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189386 suid=74 rport=47780 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109464.956:21488): pid=189385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189386 suid=74 rport=47780 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109465.535:21489): pid=189385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189386 suid=74 rport=47780 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109465.536:21490): pid=189385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189386 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109465.537:21491): pid=189385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109465.538:21492): pid=189385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109465.538:21493): pid=189385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109465.691:21494): pid=189562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189562 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770109465.692:21495): pid=188905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188916 suid=74 rport=43690 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109465.692:21496): pid=188905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188916 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109465.693:21497): pid=188905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109465.694:21498): pid=188905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=188905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109465.694:21499): pid=188905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109465.826:21500): pid=189561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189562 suid=74 rport=54020 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109465.826:21501): pid=189561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189562 suid=74 rport=54020 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109466.410:21502): pid=189561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189562 suid=74 rport=54020 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109466.410:21503): pid=189561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189562 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109466.411:21504): pid=189561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109466.412:21505): pid=189561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109466.412:21506): pid=189561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109466.563:21507): pid=189625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189625 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109466.697:21508): pid=189624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189625 suid=74 rport=54026 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109466.698:21509): pid=189624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189625 suid=74 rport=54026 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109467.154:21510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109467.348:21511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109467.368:21512): pid=189624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189625 suid=74 rport=54026 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109467.368:21513): pid=189624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189625 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109467.369:21514): pid=189624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109467.370:21515): pid=189624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189624 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109467.370:21516): pid=189624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109467.523:21517): pid=189675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189675 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109467.659:21518): pid=189674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189675 suid=74 rport=54032 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109467.659:21519): pid=189674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189675 suid=74 rport=54032 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109468.228:21520): pid=189674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189675 suid=74 rport=54032 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109468.229:21521): pid=189674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189675 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109468.230:21522): pid=189674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109468.231:21523): pid=189674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189674 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109468.231:21524): pid=189674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109468.390:21525): pid=189685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189685 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109468.526:21526): pid=189684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189685 suid=74 rport=54036 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109468.526:21527): pid=189684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189685 suid=74 rport=54036 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109469.117:21528): pid=189684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189685 suid=74 rport=54036 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109469.118:21529): pid=189684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189685 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109469.119:21530): pid=189684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109469.120:21531): pid=189684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189684 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109469.120:21532): pid=189684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109469.287:21533): pid=189695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109469.427:21534): pid=189694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189695 suid=74 rport=54040 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109469.427:21535): pid=189694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189695 suid=74 rport=54040 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109469.981:21536): pid=189694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189695 suid=74 rport=54040 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109469.981:21537): pid=189694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189695 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109469.982:21538): pid=189694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109469.983:21539): pid=189694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189694 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109469.983:21540): pid=189694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109470.146:21541): pid=189704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189704 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109470.330:21542): pid=189700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189704 suid=74 rport=54048 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109470.330:21543): pid=189700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189704 suid=74 rport=54048 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109471.817:21544): pid=189700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189704 suid=74 rport=54048 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109471.817:21545): pid=189700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189704 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109471.818:21546): pid=189700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109471.819:21547): pid=189700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189700 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109471.819:21548): pid=189700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109471.968:21549): pid=189715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189715 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109472.097:21550): pid=189714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189715 suid=74 rport=54060 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109472.097:21551): pid=189714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189715 suid=74 rport=54060 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109472.633:21552): pid=189714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189715 suid=74 rport=54060 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109472.633:21553): pid=189714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189715 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109472.634:21554): pid=189714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109472.635:21555): pid=189714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189714 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109472.635:21556): pid=189714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109472.798:21557): pid=189725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189725 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109472.933:21558): pid=189724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189725 suid=74 rport=54066 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109472.934:21559): pid=189724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189725 suid=74 rport=54066 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109473.510:21560): pid=189724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189725 suid=74 rport=54066 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109473.510:21561): pid=189724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189725 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109473.512:21562): pid=189724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109473.512:21563): pid=189724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109473.512:21564): pid=189724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109473.664:21565): pid=189735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109473.839:21566): pid=189734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189735 suid=74 rport=54078 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109473.839:21567): pid=189734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189735 suid=74 rport=54078 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109474.476:21568): pid=189734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189735 suid=74 rport=54078 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109474.476:21569): pid=189734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189735 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109474.476:21570): pid=189734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109474.477:21571): pid=189734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109474.477:21572): pid=189734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109474.630:21573): pid=189788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189788 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109474.778:21574): pid=189787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189788 suid=74 rport=54090 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109474.778:21575): pid=189787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=189788 suid=74 rport=54090 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109475.355:21576): pid=189787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189788 suid=74 rport=54090 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109475.355:21577): pid=189787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189788 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109475.355:21578): pid=189787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109475.356:21579): pid=189787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189787 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109475.356:21580): pid=189787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109475.511:21581): pid=190011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190011 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109475.635:21582): pid=189982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190011 suid=74 rport=50118 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109475.635:21583): pid=189982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190011 suid=74 rport=50118 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109476.207:21584): pid=189982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190011 suid=74 rport=50118 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109476.207:21585): pid=189982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190011 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109476.208:21586): pid=189982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109476.208:21587): pid=189982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=189982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109476.208:21588): pid=189982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109476.363:21589): pid=190045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190045 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109476.498:21590): pid=190038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190045 suid=74 rport=50126 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109476.498:21591): pid=190038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190045 suid=74 rport=50126 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109477.145:21592): pid=190038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190045 suid=74 rport=50126 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109477.145:21593): pid=190038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190045 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109477.146:21594): pid=190038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109477.146:21595): pid=190038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190038 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109477.146:21596): pid=190038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109477.382:21597): pid=190237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190237 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109477.460:21598): pid=190228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190237 suid=74 rport=50142 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109477.460:21599): pid=190228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190237 suid=74 rport=50142 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109477.990:21600): pid=190228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190237 suid=74 rport=50142 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109477.991:21601): pid=190228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190237 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109477.992:21602): pid=190228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109477.992:21603): pid=190228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190228 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109477.992:21604): pid=190228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109478.158:21605): pid=190249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109478.301:21606): pid=190248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190249 suid=74 rport=50158 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109478.301:21607): pid=190248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190249 suid=74 rport=50158 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109478.921:21608): pid=190248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190249 suid=74 rport=50158 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109478.921:21609): pid=190248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190249 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109478.922:21610): pid=190248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109478.923:21611): pid=190248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190248 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109478.923:21612): pid=190248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109479.078:21613): pid=190260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109479.216:21614): pid=190259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190260 suid=74 rport=50168 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109479.216:21615): pid=190259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190260 suid=74 rport=50168 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109479.795:21616): pid=190259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190260 suid=74 rport=50168 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109479.795:21617): pid=190259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190260 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109479.795:21618): pid=190259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109479.796:21619): pid=190259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190259 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109479.796:21620): pid=190259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109479.946:21621): pid=190270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190270 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109480.081:21622): pid=190269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190270 suid=74 rport=50172 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109480.081:21623): pid=190269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190270 suid=74 rport=50172 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109480.733:21624): pid=190269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190270 suid=74 rport=50172 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109480.733:21625): pid=190269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190270 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109480.734:21626): pid=190269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109480.734:21627): pid=190269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109480.734:21628): pid=190269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109480.962:21629): pid=190280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190280 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109481.079:21630): pid=190279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190280 suid=74 rport=50188 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109481.079:21631): pid=190279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190280 suid=74 rport=50188 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109481.680:21632): pid=190279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190280 suid=74 rport=50188 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109481.681:21633): pid=190279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190280 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109481.681:21634): pid=190279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109481.682:21635): pid=190279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109481.683:21636): pid=190279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109481.836:21637): pid=190290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190290 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109481.971:21638): pid=190289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190290 suid=74 rport=50196 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109481.971:21639): pid=190289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190290 suid=74 rport=50196 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109482.580:21640): pid=190289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190290 suid=74 rport=50196 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109482.580:21641): pid=190289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190290 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109482.582:21642): pid=190289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109482.582:21643): pid=190289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190289 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109482.582:21644): pid=190289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109482.741:21645): pid=190396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190396 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109482.881:21646): pid=190394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190396 suid=74 rport=50212 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109482.881:21647): pid=190394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190396 suid=74 rport=50212 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109483.144:21648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109483.148:21649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109483.191:21650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109483.191:21651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109483.285:21652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109483.419:21653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109483.450:21654): pid=190394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190396 suid=74 rport=50212 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109483.451:21655): pid=190394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190396 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109483.452:21656): pid=190394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109483.452:21657): pid=190394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190394 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109483.452:21658): pid=190394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109483.614:21659): pid=190445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190445 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109483.750:21660): pid=190444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190445 suid=74 rport=50228 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109483.751:21661): pid=190444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190445 suid=74 rport=50228 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109484.411:21662): pid=190444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190445 suid=74 rport=50228 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109484.412:21663): pid=190444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190445 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109484.413:21664): pid=190444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109484.413:21665): pid=190444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190444 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109484.414:21666): pid=190444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109484.572:21667): pid=190498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109484.706:21668): pid=190497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190498 suid=74 rport=50230 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109484.707:21669): pid=190497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190498 suid=74 rport=50230 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109485.324:21670): pid=190497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190498 suid=74 rport=50230 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109485.324:21671): pid=190497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190498 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109485.325:21672): pid=190497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109485.326:21673): pid=190497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190497 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109485.326:21674): pid=190497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109485.478:21675): pid=190664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190664 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109485.612:21676): pid=190663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190664 suid=74 rport=50232 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109485.612:21677): pid=190663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190664 suid=74 rport=50232 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109486.191:21678): pid=190663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190664 suid=74 rport=50232 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109486.191:21679): pid=190663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190664 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109486.192:21680): pid=190663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109486.193:21681): pid=190663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109486.193:21682): pid=190663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109486.346:21683): pid=190674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190674 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109486.479:21684): pid=190673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190674 suid=74 rport=37842 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109486.479:21685): pid=190673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190674 suid=74 rport=37842 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109486.917:21686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109486.920:21687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109486.923:21688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109487.042:21689): pid=190673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190674 suid=74 rport=37842 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109487.042:21690): pid=190673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190674 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109487.043:21691): pid=190673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109487.043:21692): pid=190673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109487.043:21693): pid=190673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109487.095:21694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109487.134:21695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109487.158:21696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109487.204:21697): pid=190803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190803 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109487.343:21698): pid=190802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190803 suid=74 rport=37850 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109487.343:21699): pid=190802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190803 suid=74 rport=37850 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109487.968:21700): pid=190813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190813 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770109488.178:21701): pid=190802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190803 suid=74 rport=37850 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109488.178:21702): pid=190802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190803 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109488.179:21703): pid=190802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109488.180:21704): pid=190802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190802 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109488.180:21705): pid=190802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109488.238:21706): pid=190812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=190813 suid=74 rport=48250 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109488.238:21707): pid=190812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=190813 suid=74 rport=48250 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109488.328:21708): pid=190815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190815 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109488.460:21709): pid=190814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190815 suid=74 rport=37852 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109488.460:21710): pid=190814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190815 suid=74 rport=37852 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109488.998:21711): pid=190814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190815 suid=74 rport=37852 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109488.998:21712): pid=190814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190815 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109488.999:21713): pid=190814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109489.000:21714): pid=190814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109489.000:21715): pid=190814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109489.163:21716): pid=190874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190874 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109489.304:21717): pid=190873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190874 suid=74 rport=37858 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109489.305:21718): pid=190873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190874 suid=74 rport=37858 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109489.888:21719): pid=190873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190874 suid=74 rport=37858 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109489.890:21720): pid=190873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190874 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109489.890:21721): pid=190873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109489.890:21722): pid=190873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190873 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109489.890:21723): pid=190873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109490.042:21724): pid=190945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109490.179:21725): pid=190944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190945 suid=74 rport=37870 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109490.180:21726): pid=190944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=190945 suid=74 rport=37870 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109490.600:21727): pid=190812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190813 suid=74 rport=48250 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109490.600:21728): pid=190812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190813 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109490.601:21729): pid=190812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109490.602:21730): pid=190812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190812 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109490.602:21731): pid=190812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109490.619:21732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109490.770:21733): pid=190944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190945 suid=74 rport=37870 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109490.770:21734): pid=190944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190945 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109490.771:21735): pid=190944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109490.772:21736): pid=190944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=190944 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109490.772:21737): pid=190944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109490.931:21738): pid=191035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109491.069:21739): pid=191034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191035 suid=74 rport=37876 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109491.070:21740): pid=191034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191035 suid=74 rport=37876 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770109491.095:21741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109491.783:21742): pid=191034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191035 suid=74 rport=37876 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109491.783:21743): pid=191034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191035 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109491.783:21744): pid=191034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109491.784:21745): pid=191034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109491.784:21746): pid=191034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109491.952:21747): pid=191056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191056 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109492.096:21748): pid=191055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191056 suid=74 rport=37886 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109492.096:21749): pid=191055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191056 suid=74 rport=37886 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109492.701:21750): pid=191055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191056 suid=74 rport=37886 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109492.701:21751): pid=191055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191056 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109492.702:21752): pid=191055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109492.703:21753): pid=191055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109492.703:21754): pid=191055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109492.854:21755): pid=191066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109492.989:21756): pid=191065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191066 suid=74 rport=37900 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109492.989:21757): pid=191065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191066 suid=74 rport=37900 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109493.139:21758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109493.493:21759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109493.556:21760): pid=191065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191066 suid=74 rport=37900 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109493.557:21761): pid=191065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191066 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109493.558:21762): pid=191065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109493.559:21763): pid=191065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191065 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109493.559:21764): pid=191065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109493.730:21765): pid=191099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191099 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109493.876:21766): pid=191098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191099 suid=74 rport=37908 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109493.877:21767): pid=191098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191099 suid=74 rport=37908 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109494.481:21768): pid=191098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191099 suid=74 rport=37908 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109494.482:21769): pid=191098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191099 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109494.482:21770): pid=191098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109494.483:21771): pid=191098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109494.483:21772): pid=191098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109494.680:21773): pid=191152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109494.834:21774): pid=191151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191152 suid=74 rport=37924 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109494.835:21775): pid=191151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191152 suid=74 rport=37924 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109495.374:21776): pid=191151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191152 suid=74 rport=37924 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109495.374:21777): pid=191151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191152 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109495.375:21778): pid=191151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109495.376:21779): pid=191151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191151 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109495.376:21780): pid=191151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109495.527:21781): pid=191326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191326 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109495.671:21782): pid=191325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191326 suid=74 rport=57524 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109495.671:21783): pid=191325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191326 suid=74 rport=57524 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109496.264:21784): pid=191325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191326 suid=74 rport=57524 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109496.265:21785): pid=191325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191326 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109496.265:21786): pid=191325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109496.266:21787): pid=191325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191325 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109496.266:21788): pid=191325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109496.409:21789): pid=191336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191336 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109496.541:21790): pid=191335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191336 suid=74 rport=57528 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109496.542:21791): pid=191335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191336 suid=74 rport=57528 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109497.099:21792): pid=191335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191336 suid=74 rport=57528 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109497.099:21793): pid=191335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191336 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109497.100:21794): pid=191335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109497.101:21795): pid=191335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109497.101:21796): pid=191335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109497.252:21797): pid=191399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109497.390:21798): pid=191398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191399 suid=74 rport=57530 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109497.391:21799): pid=191398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191399 suid=74 rport=57530 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109497.872:21800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109498.035:21801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109498.050:21802): pid=191398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191399 suid=74 rport=57530 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109498.051:21803): pid=191398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191399 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109498.051:21804): pid=191398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109498.052:21805): pid=191398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109498.052:21806): pid=191398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109498.300:21807): pid=191448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191448 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109498.375:21808): pid=191447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191448 suid=74 rport=57542 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109498.376:21809): pid=191447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191448 suid=74 rport=57542 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109498.957:21810): pid=191447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191448 suid=74 rport=57542 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109498.958:21811): pid=191447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191448 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109498.959:21812): pid=191447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109498.959:21813): pid=191447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109498.960:21814): pid=191447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109499.130:21815): pid=191458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109499.283:21816): pid=191457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191458 suid=74 rport=57558 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109499.283:21817): pid=191457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191458 suid=74 rport=57558 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109499.885:21818): pid=191457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191458 suid=74 rport=57558 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109499.885:21819): pid=191457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191458 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109499.886:21820): pid=191457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109499.886:21821): pid=191457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109499.887:21822): pid=191457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109500.031:21823): pid=191468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191468 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109500.163:21824): pid=191467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191468 suid=74 rport=57570 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109500.163:21825): pid=191467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191468 suid=74 rport=57570 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109500.709:21826): pid=191467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191468 suid=74 rport=57570 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109500.710:21827): pid=191467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191468 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109500.711:21828): pid=191467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109500.712:21829): pid=191467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191467 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109500.712:21830): pid=191467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109500.887:21831): pid=191470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109501.016:21832): pid=191469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191470 suid=74 rport=57578 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109501.016:21833): pid=191469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191470 suid=74 rport=57578 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109501.673:21834): pid=191469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191470 suid=74 rport=57578 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109501.673:21835): pid=191469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191470 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109501.674:21836): pid=191469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109501.674:21837): pid=191469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191469 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109501.674:21838): pid=191469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109501.837:21839): pid=191501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770109501.952:21840): pid=191531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109501.972:21841): pid=191500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191501 suid=74 rport=57594 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109501.973:21842): pid=191500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191501 suid=74 rport=57594 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109502.550:21843): pid=191500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191501 suid=74 rport=57594 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109502.550:21844): pid=191500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191501 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109502.551:21845): pid=191500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109502.552:21846): pid=191500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191500 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109502.552:21847): pid=191500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109502.697:21848): pid=191568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109502.826:21849): pid=191560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191568 suid=74 rport=57598 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109502.827:21850): pid=191560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191568 suid=74 rport=57598 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109503.396:21851): pid=191560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191568 suid=74 rport=57598 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109503.397:21852): pid=191560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191568 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109503.398:21853): pid=191560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109503.398:21854): pid=191560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191560 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109503.399:21855): pid=191560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109503.556:21856): pid=191668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109503.691:21857): pid=191667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191668 suid=74 rport=57606 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109503.691:21858): pid=191667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191668 suid=74 rport=57606 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109504.166:21859): pid=191530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=191531 suid=74 rport=43178 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109504.166:21860): pid=191530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=191531 suid=74 rport=43178 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109504.248:21861): pid=191667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191668 suid=74 rport=57606 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109504.249:21862): pid=191667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191668 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109504.249:21863): pid=191667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109504.250:21864): pid=191667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191667 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109504.250:21865): pid=191667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109504.403:21866): pid=191690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109504.539:21867): pid=191689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191690 suid=74 rport=57618 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109504.539:21868): pid=191689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191690 suid=74 rport=57618 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109505.184:21869): pid=191689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191690 suid=74 rport=57618 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109505.185:21870): pid=191689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191690 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109505.186:21871): pid=191689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109505.186:21872): pid=191689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191689 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109505.186:21873): pid=191689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109505.350:21874): pid=191906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109505.486:21875): pid=191905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191906 suid=74 rport=57628 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109505.486:21876): pid=191905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191906 suid=74 rport=57628 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109506.425:21877): pid=191905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191906 suid=74 rport=57628 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109506.427:21878): pid=191905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191906 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109506.427:21879): pid=191905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109506.428:21880): pid=191905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109506.428:21881): pid=191905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109506.587:21882): pid=191916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191916 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109506.722:21883): pid=191915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191916 suid=74 rport=50760 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109506.722:21884): pid=191915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191916 suid=74 rport=50760 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109507.202:21885): pid=191530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191531 suid=74 rport=43178 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109507.203:21886): pid=191530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191531 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109507.204:21887): pid=191530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109507.205:21888): pid=191530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191530 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109507.205:21889): pid=191530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109507.276:21890): pid=191915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191916 suid=74 rport=50760 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109507.276:21891): pid=191915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191916 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109507.276:21892): pid=191915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109507.277:21893): pid=191915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191915 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109507.277:21894): pid=191915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109507.437:21895): pid=191979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109507.567:21896): pid=191978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191979 suid=74 rport=50762 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109507.567:21897): pid=191978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191979 suid=74 rport=50762 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109508.137:21898): pid=191978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191979 suid=74 rport=50762 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109508.137:21899): pid=191978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191979 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109508.138:21900): pid=191978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109508.139:21901): pid=191978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109508.139:21902): pid=191978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109508.294:21903): pid=191989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191989 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109508.483:21904): pid=191988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191989 suid=74 rport=50772 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109508.483:21905): pid=191988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191989 suid=74 rport=50772 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109509.087:21906): pid=191988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191989 suid=74 rport=50772 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109509.087:21907): pid=191988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191989 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109509.088:21908): pid=191988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109509.089:21909): pid=191988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191988 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109509.089:21910): pid=191988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109509.252:21911): pid=191999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109509.392:21912): pid=191998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191999 suid=74 rport=50774 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109509.392:21913): pid=191998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=191999 suid=74 rport=50774 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109509.594:21914): pid=192001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192001 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109509.888:21915): pid=192000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=192001 suid=74 rport=46376 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109509.888:21916): pid=192000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=192001 suid=74 rport=46376 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109510.001:21917): pid=191998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=191999 suid=74 rport=50774 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109510.001:21918): pid=191998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191999 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109510.001:21919): pid=191998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109510.002:21920): pid=191998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=191998 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109510.002:21921): pid=191998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109510.185:21922): pid=192003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109510.326:21923): pid=192002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192003 suid=74 rport=50784 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109510.326:21924): pid=192002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192003 suid=74 rport=50784 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109510.921:21925): pid=192002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192003 suid=74 rport=50784 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109510.921:21926): pid=192002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192003 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109510.921:21927): pid=192002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109510.922:21928): pid=192002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192002 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109510.922:21929): pid=192002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109511.070:21930): pid=192013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192013 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109511.204:21931): pid=192012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192013 suid=74 rport=50788 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109511.204:21932): pid=192012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192013 suid=74 rport=50788 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109511.867:21933): pid=192012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192013 suid=74 rport=50788 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109511.867:21934): pid=192012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192013 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109511.867:21935): pid=192012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109511.868:21936): pid=192012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109511.868:21937): pid=192012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109512.060:21938): pid=192023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109512.184:21939): pid=192022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192023 suid=74 rport=50796 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109512.184:21940): pid=192022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192023 suid=74 rport=50796 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109512.742:21941): pid=192022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192023 suid=74 rport=50796 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109512.742:21942): pid=192022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192023 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109512.742:21943): pid=192022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109512.743:21944): pid=192022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109512.743:21945): pid=192022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109512.782:21946): pid=192000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192001 suid=74 rport=46376 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109512.782:21947): pid=192000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192001 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109512.783:21948): pid=192000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109512.783:21949): pid=192000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192000 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109512.783:21950): pid=192000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109512.907:21951): pid=192033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192033 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109513.049:21952): pid=192032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192033 suid=74 rport=50800 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109513.049:21953): pid=192032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192033 suid=74 rport=50800 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109513.503:21954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109513.505:21955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109513.625:21956): pid=192032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192033 suid=74 rport=50800 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109513.625:21957): pid=192032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192033 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109513.626:21958): pid=192032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109513.627:21959): pid=192032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109513.627:21960): pid=192032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109513.668:21961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109513.702:21962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109513.790:21963): pid=192080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192080 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109513.937:21964): pid=192079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192080 suid=74 rport=50804 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109513.937:21965): pid=192079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192080 suid=74 rport=50804 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109514.529:21966): pid=192079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192080 suid=74 rport=50804 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109514.529:21967): pid=192079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192080 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109514.530:21968): pid=192079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109514.531:21969): pid=192079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192079 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109514.531:21970): pid=192079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109514.695:21971): pid=192094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192094 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109514.839:21972): pid=192091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192094 suid=74 rport=50814 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109514.839:21973): pid=192091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192094 suid=74 rport=50814 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109514.916:21974): pid=192156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192156 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770109515.462:21975): pid=192091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192094 suid=74 rport=50814 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109515.462:21976): pid=192091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192094 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109515.463:21977): pid=192091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109515.464:21978): pid=192091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192091 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109515.464:21979): pid=192091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109515.654:21980): pid=192376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109515.736:21981): pid=192373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192376 suid=74 rport=45210 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109515.737:21982): pid=192373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192376 suid=74 rport=45210 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109516.151:21983): pid=192134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=192156 suid=74 rport=44666 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109516.151:21984): pid=192134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=192156 suid=74 rport=44666 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109516.268:21985): pid=192373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192376 suid=74 rport=45210 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109516.269:21986): pid=192373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192376 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109516.269:21987): pid=192373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109516.270:21988): pid=192373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109516.270:21989): pid=192373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109516.427:21990): pid=192434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192434 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109516.564:21991): pid=192432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192434 suid=74 rport=45218 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109516.564:21992): pid=192432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192434 suid=74 rport=45218 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109517.013:21993): pid=192134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192156 suid=74 rport=44666 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109517.013:21994): pid=192134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192156 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109517.013:21995): pid=192134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109517.014:21996): pid=192134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109517.014:21997): pid=192134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109517.143:21998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109517.149:21999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109517.150:22000): pid=192432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192434 suid=74 rport=45218 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109517.150:22001): pid=192432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192434 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109517.152:22002): pid=192432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109517.153:22003): pid=192432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109517.153:22004): pid=192432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109517.240:22005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109517.320:22006): pid=192597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109517.325:22007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109517.355:22008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109517.436:22009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109517.459:22010): pid=192587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192597 suid=74 rport=45234 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109517.459:22011): pid=192587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192597 suid=74 rport=45234 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109518.068:22012): pid=192587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192597 suid=74 rport=45234 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109518.068:22013): pid=192587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192597 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109518.069:22014): pid=192587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109518.069:22015): pid=192587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192587 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109518.069:22016): pid=192587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109518.233:22017): pid=192628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192628 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109518.367:22018): pid=192627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192628 suid=74 rport=45238 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109518.368:22019): pid=192627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192628 suid=74 rport=45238 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109519.045:22020): pid=192627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192628 suid=74 rport=45238 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109519.046:22021): pid=192627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192628 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109519.046:22022): pid=192627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109519.047:22023): pid=192627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192627 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109519.047:22024): pid=192627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109519.251:22025): pid=192638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109519.396:22026): pid=192637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192638 suid=74 rport=45262 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109519.397:22027): pid=192637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192638 suid=74 rport=45262 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109520.014:22028): pid=192637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192638 suid=74 rport=45262 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109520.015:22029): pid=192637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192638 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109520.015:22030): pid=192637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109520.016:22031): pid=192637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192637 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109520.016:22032): pid=192637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109520.166:22033): pid=192648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192648 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109520.322:22034): pid=192647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192648 suid=74 rport=45268 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109520.323:22035): pid=192647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192648 suid=74 rport=45268 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109520.851:22036): pid=192647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192648 suid=74 rport=45268 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109520.852:22037): pid=192647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192648 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109520.853:22038): pid=192647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109520.854:22039): pid=192647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192647 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109520.854:22040): pid=192647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109521.006:22041): pid=192658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192658 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109521.135:22042): pid=192657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192658 suid=74 rport=45284 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109521.135:22043): pid=192657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192658 suid=74 rport=45284 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109521.149:22044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109521.666:22045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109521.705:22046): pid=192657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192658 suid=74 rport=45284 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109521.705:22047): pid=192657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192658 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109521.706:22048): pid=192657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109521.707:22049): pid=192657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192657 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109521.707:22050): pid=192657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109521.866:22051): pid=192692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192692 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109521.999:22052): pid=192691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192692 suid=74 rport=45308 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109522.000:22053): pid=192691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192692 suid=74 rport=45308 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109522.684:22054): pid=192691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192692 suid=74 rport=45308 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109522.685:22055): pid=192691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192692 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109522.685:22056): pid=192691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109522.686:22057): pid=192691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192691 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109522.686:22058): pid=192691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109522.855:22059): pid=192702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192702 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109522.999:22060): pid=192701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192702 suid=74 rport=45310 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109523.000:22061): pid=192701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192702 suid=74 rport=45310 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109523.567:22062): pid=192701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192702 suid=74 rport=45310 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109523.568:22063): pid=192701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192702 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109523.568:22064): pid=192701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109523.569:22065): pid=192701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109523.569:22066): pid=192701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109523.583:22067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109523.723:22068): pid=192741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192741 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109523.860:22069): pid=192740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192741 suid=74 rport=45312 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109523.861:22070): pid=192740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192741 suid=74 rport=45312 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770109523.913:22071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109524.430:22072): pid=192740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192741 suid=74 rport=45312 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109524.431:22073): pid=192740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192741 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109524.431:22074): pid=192740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109524.432:22075): pid=192740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109524.432:22076): pid=192740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109524.584:22077): pid=192745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192745 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109524.727:22078): pid=192744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192745 suid=74 rport=45318 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109524.727:22079): pid=192744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192745 suid=74 rport=45318 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109525.302:22080): pid=192744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192745 suid=74 rport=45318 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109525.302:22081): pid=192744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192745 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109525.303:22082): pid=192744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109525.304:22083): pid=192744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192744 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109525.304:22084): pid=192744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109525.459:22085): pid=192939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192939 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109525.620:22086): pid=192893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192939 suid=74 rport=45330 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109525.620:22087): pid=192893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192939 suid=74 rport=45330 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109526.237:22088): pid=192893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192939 suid=74 rport=45330 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109526.238:22089): pid=192893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192939 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109526.238:22090): pid=192893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109526.239:22091): pid=192893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192893 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109526.239:22092): pid=192893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109526.389:22093): pid=192970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109526.523:22094): pid=192969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192970 suid=74 rport=51878 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109526.523:22095): pid=192969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=192970 suid=74 rport=51878 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109527.087:22096): pid=192969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192970 suid=74 rport=51878 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109527.087:22097): pid=192969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192970 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109527.088:22098): pid=192969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109527.089:22099): pid=192969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=192969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109527.089:22100): pid=192969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109527.255:22101): pid=193033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193033 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109527.393:22102): pid=193032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193033 suid=74 rport=51884 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109527.394:22103): pid=193032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193033 suid=74 rport=51884 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109527.970:22104): pid=193032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193033 suid=74 rport=51884 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109527.971:22105): pid=193032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193033 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109527.971:22106): pid=193032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109527.971:22107): pid=193032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109527.971:22108): pid=193032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109528.127:22109): pid=193062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1770109528.143:22110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109528.277:22111): pid=193058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193062 suid=74 rport=51898 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109528.277:22112): pid=193058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193062 suid=74 rport=51898 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770109528.324:22113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109528.853:22114): pid=193058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193062 suid=74 rport=51898 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109528.854:22115): pid=193058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193062 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109528.855:22116): pid=193058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109528.855:22117): pid=193058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193058 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109528.855:22118): pid=193058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109529.016:22119): pid=193178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109529.159:22120): pid=193172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193178 suid=74 rport=51904 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109529.159:22121): pid=193172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193178 suid=74 rport=51904 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109529.964:22122): pid=193172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193178 suid=74 rport=51904 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109529.965:22123): pid=193172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193178 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109529.966:22124): pid=193172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109529.966:22125): pid=193172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109529.966:22126): pid=193172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109530.141:22127): pid=193267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193267 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109530.276:22128): pid=193266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193267 suid=74 rport=51908 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109530.276:22129): pid=193266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193267 suid=74 rport=51908 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109530.838:22130): pid=193266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193267 suid=74 rport=51908 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109530.838:22131): pid=193266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193267 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109530.839:22132): pid=193266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109530.840:22133): pid=193266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193266 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109530.840:22134): pid=193266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109530.995:22135): pid=193288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193288 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109531.136:22136): pid=193287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193288 suid=74 rport=51910 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109531.136:22137): pid=193287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193288 suid=74 rport=51910 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109531.723:22138): pid=193287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193288 suid=74 rport=51910 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109531.723:22139): pid=193287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193288 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109531.724:22140): pid=193287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109531.724:22141): pid=193287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193287 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109531.724:22142): pid=193287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109532.033:22143): pid=193298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109532.174:22144): pid=193297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193298 suid=74 rport=51916 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109532.174:22145): pid=193297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193298 suid=74 rport=51916 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109532.825:22146): pid=193297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193298 suid=74 rport=51916 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109532.826:22147): pid=193297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193298 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109532.826:22148): pid=193297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109532.827:22149): pid=193297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109532.827:22150): pid=193297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109533.031:22151): pid=193308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193308 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109533.167:22152): pid=193307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193308 suid=74 rport=51930 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109533.168:22153): pid=193307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193308 suid=74 rport=51930 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109533.733:22154): pid=193307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193308 suid=74 rport=51930 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109533.734:22155): pid=193307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193308 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109533.735:22156): pid=193307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109533.735:22157): pid=193307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193307 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109533.735:22158): pid=193307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109533.898:22159): pid=193318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109534.041:22160): pid=193317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193318 suid=74 rport=51944 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109534.041:22161): pid=193317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193318 suid=74 rport=51944 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109534.628:22162): pid=193317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193318 suid=74 rport=51944 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109534.628:22163): pid=193317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193318 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109534.629:22164): pid=193317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109534.630:22165): pid=193317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193317 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109534.630:22166): pid=193317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109534.789:22167): pid=193322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193322 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109534.936:22168): pid=193321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193322 suid=74 rport=51958 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109534.936:22169): pid=193321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193322 suid=74 rport=51958 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109534.991:22170): pid=193373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109535.285:22171): pid=193372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=193373 suid=74 rport=59062 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109535.285:22172): pid=193372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=193373 suid=74 rport=59062 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109535.517:22173): pid=193321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193322 suid=74 rport=51958 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109535.517:22174): pid=193321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193322 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109535.518:22175): pid=193321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109535.519:22176): pid=193321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109535.519:22177): pid=193321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109535.670:22178): pid=193539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109535.811:22179): pid=193538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193539 suid=74 rport=49704 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109535.811:22180): pid=193538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193539 suid=74 rport=49704 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109536.494:22181): pid=193538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193539 suid=74 rport=49704 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109536.495:22182): pid=193538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193539 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109536.495:22183): pid=193538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109536.496:22184): pid=193538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193538 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109536.496:22185): pid=193538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109536.525:22186): pid=193372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193373 suid=74 rport=59062 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109536.526:22187): pid=193372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193373 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109536.527:22188): pid=193372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109536.527:22189): pid=193372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193372 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109536.527:22190): pid=193372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109536.651:22191): pid=193585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193585 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109536.819:22192): pid=193584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193585 suid=74 rport=49710 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109536.819:22193): pid=193584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193585 suid=74 rport=49710 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109537.329:22194): pid=193584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193585 suid=74 rport=49710 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109537.330:22195): pid=193584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193585 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109537.331:22196): pid=193584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109537.331:22197): pid=193584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109537.331:22198): pid=193584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109537.499:22199): pid=193648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193648 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109537.633:22200): pid=193647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193648 suid=74 rport=49716 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109537.633:22201): pid=193647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193648 suid=74 rport=49716 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109538.196:22202): pid=193647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193648 suid=74 rport=49716 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109538.196:22203): pid=193647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193648 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109538.197:22204): pid=193647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109538.197:22205): pid=193647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193647 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109538.197:22206): pid=193647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109538.346:22207): pid=193658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193658 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109538.477:22208): pid=193657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193658 suid=74 rport=49730 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109538.477:22209): pid=193657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193658 suid=74 rport=49730 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109539.026:22210): pid=193657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193658 suid=74 rport=49730 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109539.027:22211): pid=193657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193658 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109539.028:22212): pid=193657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109539.028:22213): pid=193657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193657 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109539.028:22214): pid=193657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109539.190:22215): pid=193668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109539.334:22216): pid=193667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193668 suid=74 rport=49744 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109539.334:22217): pid=193667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193668 suid=74 rport=49744 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109540.021:22218): pid=193667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193668 suid=74 rport=49744 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109540.021:22219): pid=193667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193668 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109540.022:22220): pid=193667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109540.023:22221): pid=193667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193667 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109540.023:22222): pid=193667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109540.181:22223): pid=193678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193678 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109540.324:22224): pid=193677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193678 suid=74 rport=49746 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109540.324:22225): pid=193677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193678 suid=74 rport=49746 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109540.910:22226): pid=193677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193678 suid=74 rport=49746 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109540.910:22227): pid=193677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193678 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109540.911:22228): pid=193677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109540.912:22229): pid=193677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193677 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109540.912:22230): pid=193677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109541.083:22231): pid=193691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193691 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109541.226:22232): pid=193687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193691 suid=74 rport=49756 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109541.226:22233): pid=193687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193691 suid=74 rport=49756 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109541.818:22234): pid=193687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193691 suid=74 rport=49756 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109541.819:22235): pid=193687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193691 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109541.819:22236): pid=193687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109541.820:22237): pid=193687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193687 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109541.820:22238): pid=193687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109541.977:22239): pid=193758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109542.112:22240): pid=193754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193758 suid=74 rport=49770 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109542.112:22241): pid=193754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193758 suid=74 rport=49770 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109542.665:22242): pid=193754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193758 suid=74 rport=49770 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109542.666:22243): pid=193754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193758 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109542.667:22244): pid=193754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109542.667:22245): pid=193754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193754 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109542.667:22246): pid=193754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109542.834:22247): pid=193905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109542.969:22248): pid=193901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193905 suid=74 rport=49776 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109542.969:22249): pid=193901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=193905 suid=74 rport=49776 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109543.704:22250): pid=193901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193905 suid=74 rport=49776 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109543.704:22251): pid=193901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193905 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109543.705:22252): pid=193901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109543.706:22253): pid=193901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=193901 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109543.706:22254): pid=193901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109543.723:22255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109543.727:22256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109543.878:22257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109543.878:22258): pid=194022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109543.931:22259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109544.018:22260): pid=194016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194022 suid=74 rport=49784 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109544.018:22261): pid=194016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194022 suid=74 rport=49784 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109544.563:22262): pid=194016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194022 suid=74 rport=49784 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109544.563:22263): pid=194016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194022 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109544.564:22264): pid=194016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109544.565:22265): pid=194016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194016 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109544.565:22266): pid=194016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109544.721:22267): pid=194036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194036 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109544.858:22268): pid=194035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194036 suid=74 rport=49794 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109544.858:22269): pid=194035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194036 suid=74 rport=49794 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109545.462:22270): pid=194035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194036 suid=74 rport=49794 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109545.462:22271): pid=194035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194036 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109545.463:22272): pid=194035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109545.464:22273): pid=194035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109545.464:22274): pid=194035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109545.624:22275): pid=194242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109545.758:22276): pid=194229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194242 suid=74 rport=49672 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109545.758:22277): pid=194229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194242 suid=74 rport=49672 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109546.323:22278): pid=194229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194242 suid=74 rport=49672 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109546.323:22279): pid=194229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194242 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109546.324:22280): pid=194229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109546.324:22281): pid=194229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194229 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109546.325:22282): pid=194229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109546.559:22283): pid=194261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194261 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109546.665:22284): pid=194260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194261 suid=74 rport=49678 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109546.665:22285): pid=194260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194261 suid=74 rport=49678 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109547.156:22286): pid=194260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194261 suid=74 rport=49678 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109547.156:22287): pid=194260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194261 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109547.157:22288): pid=194260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109547.158:22289): pid=194260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109547.158:22290): pid=194260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109547.317:22291): pid=194271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194271 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109547.451:22292): pid=194270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194271 suid=74 rport=49694 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109547.451:22293): pid=194270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194271 suid=74 rport=49694 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109547.914:22294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109547.917:22295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109547.920:22296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109548.041:22297): pid=194270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194271 suid=74 rport=49694 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109548.042:22298): pid=194270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194271 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109548.042:22299): pid=194270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109548.043:22300): pid=194270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194270 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109548.043:22301): pid=194270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109548.082:22302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109548.143:22303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109548.208:22304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109548.212:22305): pid=194398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109548.345:22306): pid=194397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194398 suid=74 rport=49696 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109548.345:22307): pid=194397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194398 suid=74 rport=49696 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109548.912:22308): pid=194397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194398 suid=74 rport=49696 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109548.912:22309): pid=194397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194398 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109548.913:22310): pid=194397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109548.913:22311): pid=194397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194397 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109548.913:22312): pid=194397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109549.071:22313): pid=194400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194400 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109549.204:22314): pid=194399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194400 suid=74 rport=49706 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109549.204:22315): pid=194399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194400 suid=74 rport=49706 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109549.791:22316): pid=194399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194400 suid=74 rport=49706 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109549.791:22317): pid=194399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194400 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109549.792:22318): pid=194399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109549.793:22319): pid=194399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109549.793:22320): pid=194399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109550.008:22321): pid=194410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109550.131:22322): pid=194409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194410 suid=74 rport=49718 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109550.131:22323): pid=194409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194410 suid=74 rport=49718 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109550.596:22324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109550.596:22325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109550.689:22326): pid=194409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194410 suid=74 rport=49718 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109550.689:22327): pid=194409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194410 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109550.690:22328): pid=194409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109550.691:22329): pid=194409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109550.691:22330): pid=194409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109550.843:22331): pid=194422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194422 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109550.979:22332): pid=194421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194422 suid=74 rport=49720 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109550.979:22333): pid=194421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194422 suid=74 rport=49720 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109551.545:22334): pid=194421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194422 suid=74 rport=49720 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109551.545:22335): pid=194421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194422 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109551.546:22336): pid=194421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109551.547:22337): pid=194421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194421 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109551.547:22338): pid=194421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109551.702:22339): pid=194432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109551.847:22340): pid=194431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194432 suid=74 rport=49732 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109551.847:22341): pid=194431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194432 suid=74 rport=49732 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109552.148:22342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109552.422:22343): pid=194431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194432 suid=74 rport=49732 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109552.423:22344): pid=194431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194432 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109552.424:22345): pid=194431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109552.424:22346): pid=194431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109552.424:22347): pid=194431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109552.604:22348): pid=194465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194465 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109552.637:22349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109552.743:22350): pid=194464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194465 suid=74 rport=49748 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109552.743:22351): pid=194464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194465 suid=74 rport=49748 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109553.372:22352): pid=194464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194465 suid=74 rport=49748 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109553.373:22353): pid=194464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194465 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109553.373:22354): pid=194464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109553.374:22355): pid=194464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194464 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109553.374:22356): pid=194464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109553.591:22357): pid=194475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194475 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109553.728:22358): pid=194474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194475 suid=74 rport=49762 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109553.729:22359): pid=194474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194475 suid=74 rport=49762 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109554.140:22360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109554.291:22361): pid=194474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194475 suid=74 rport=49762 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109554.292:22362): pid=194474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194475 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109554.293:22363): pid=194474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109554.293:22364): pid=194474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194474 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109554.293:22365): pid=194474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109554.457:22366): pid=194563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194563 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109554.466:22367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109554.616:22368): pid=194561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194563 suid=74 rport=49772 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109554.617:22369): pid=194561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194563 suid=74 rport=49772 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109555.159:22370): pid=194561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194563 suid=74 rport=49772 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109555.159:22371): pid=194561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194563 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109555.161:22372): pid=194561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109555.161:22373): pid=194561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109555.161:22374): pid=194561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109555.344:22375): pid=194667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194667 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109555.484:22376): pid=194666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194667 suid=74 rport=49774 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109555.484:22377): pid=194666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194667 suid=74 rport=49774 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109556.074:22378): pid=194666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194667 suid=74 rport=49774 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109556.074:22379): pid=194666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194667 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109556.075:22380): pid=194666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109556.076:22381): pid=194666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194666 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109556.076:22382): pid=194666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109556.230:22383): pid=194897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194897 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109556.381:22384): pid=194896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194897 suid=74 rport=35192 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109556.381:22385): pid=194896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194897 suid=74 rport=35192 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109557.020:22386): pid=194896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194897 suid=74 rport=35192 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109557.020:22387): pid=194896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194897 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109557.021:22388): pid=194896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109557.022:22389): pid=194896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194896 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109557.022:22390): pid=194896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109557.178:22391): pid=194918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109557.320:22392): pid=194917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194918 suid=74 rport=35196 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109557.320:22393): pid=194917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194918 suid=74 rport=35196 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109557.897:22394): pid=194917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194918 suid=74 rport=35196 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109557.897:22395): pid=194917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194918 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109557.898:22396): pid=194917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109557.899:22397): pid=194917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194917 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109557.899:22398): pid=194917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109558.060:22399): pid=194981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109558.221:22400): pid=194980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194981 suid=74 rport=35208 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109558.221:22401): pid=194980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=194981 suid=74 rport=35208 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109558.390:22402): pid=194983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194983 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109558.411:22403): pid=194982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=194983 suid=74 rport=57904 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109558.411:22404): pid=194982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=194983 suid=74 rport=57904 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109558.642:22405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109558.773:22406): pid=194980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194981 suid=74 rport=35208 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109558.773:22407): pid=194980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194981 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109558.774:22408): pid=194980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109558.775:22409): pid=194980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109558.775:22410): pid=194980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109558.825:22411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109558.937:22412): pid=195034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109559.075:22413): pid=195033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195034 suid=74 rport=35224 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109559.075:22414): pid=195033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195034 suid=74 rport=35224 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109559.657:22415): pid=195033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195034 suid=74 rport=35224 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109559.657:22416): pid=195033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195034 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109559.658:22417): pid=195033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109559.659:22418): pid=195033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195033 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109559.659:22419): pid=195033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109559.805:22420): pid=195044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195044 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109559.936:22421): pid=195043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195044 suid=74 rport=35236 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109559.937:22422): pid=195043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195044 suid=74 rport=35236 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109560.104:22423): pid=194982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194983 suid=74 rport=57904 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109560.105:22424): pid=194982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194983 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109560.105:22425): pid=194982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109560.106:22426): pid=194982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=194982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109560.106:22427): pid=194982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109560.577:22428): pid=195043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195044 suid=74 rport=35236 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109560.577:22429): pid=195043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195044 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109560.578:22430): pid=195043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109560.579:22431): pid=195043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195043 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109560.579:22432): pid=195043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109560.748:22433): pid=195054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195054 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109560.885:22434): pid=195053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195054 suid=74 rport=35240 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109560.885:22435): pid=195053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195054 suid=74 rport=35240 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109561.499:22436): pid=195053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195054 suid=74 rport=35240 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109561.499:22437): pid=195053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195054 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109561.500:22438): pid=195053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109561.500:22439): pid=195053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195053 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109561.500:22440): pid=195053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109561.656:22441): pid=195064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109561.799:22442): pid=195063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195064 suid=74 rport=35254 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109561.799:22443): pid=195063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195064 suid=74 rport=35254 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109562.377:22444): pid=195063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195064 suid=74 rport=35254 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109562.378:22445): pid=195063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195064 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109562.378:22446): pid=195063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109562.379:22447): pid=195063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109562.379:22448): pid=195063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109562.530:22449): pid=195070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109562.675:22450): pid=195065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195070 suid=74 rport=35256 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109562.676:22451): pid=195065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195070 suid=74 rport=35256 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109563.226:22452): pid=195065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195070 suid=74 rport=35256 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109563.227:22453): pid=195065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195070 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109563.228:22454): pid=195065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109563.229:22455): pid=195065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195065 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109563.229:22456): pid=195065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109563.390:22457): pid=195076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109563.531:22458): pid=195075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195076 suid=74 rport=35262 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109563.532:22459): pid=195075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195076 suid=74 rport=35262 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109564.235:22460): pid=195075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195076 suid=74 rport=35262 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109564.235:22461): pid=195075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195076 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109564.236:22462): pid=195075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109564.237:22463): pid=195075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109564.237:22464): pid=195075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109564.397:22465): pid=195086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195086 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109564.562:22466): pid=195085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195086 suid=74 rport=35266 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109564.562:22467): pid=195085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195086 suid=74 rport=35266 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109565.124:22468): pid=195085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195086 suid=74 rport=35266 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109565.125:22469): pid=195085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195086 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109565.126:22470): pid=195085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109565.126:22471): pid=195085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109565.126:22472): pid=195085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109565.295:22473): pid=195139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195139 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109565.437:22474): pid=195138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195139 suid=74 rport=35282 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109565.438:22475): pid=195138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195139 suid=74 rport=35282 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109566.027:22476): pid=195138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195139 suid=74 rport=35282 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109566.028:22477): pid=195138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195139 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109566.029:22478): pid=195138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109566.029:22479): pid=195138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109566.029:22480): pid=195138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109566.184:22481): pid=195313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195313 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109566.319:22482): pid=195312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195313 suid=74 rport=43094 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109566.320:22483): pid=195312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195313 suid=74 rport=43094 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109566.921:22484): pid=195312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195313 suid=74 rport=43094 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109566.922:22485): pid=195312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195313 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109566.922:22486): pid=195312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109566.923:22487): pid=195312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195312 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109566.923:22488): pid=195312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109567.084:22489): pid=195323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195323 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109567.263:22490): pid=195322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195323 suid=74 rport=43104 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109567.263:22491): pid=195322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195323 suid=74 rport=43104 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109567.876:22492): pid=195322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195323 suid=74 rport=43104 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109567.877:22493): pid=195322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195323 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109567.878:22494): pid=195322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109567.878:22495): pid=195322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195322 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109567.878:22496): pid=195322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109568.039:22497): pid=195442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195442 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109568.170:22498): pid=195441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195442 suid=74 rport=43116 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109568.171:22499): pid=195441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195442 suid=74 rport=43116 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109568.726:22500): pid=195441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195442 suid=74 rport=43116 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109568.726:22501): pid=195441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195442 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109568.727:22502): pid=195441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109568.727:22503): pid=195441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195441 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109568.727:22504): pid=195441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109568.885:22505): pid=195534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195534 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109569.025:22506): pid=195533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195534 suid=74 rport=43118 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109569.025:22507): pid=195533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195534 suid=74 rport=43118 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109569.600:22508): pid=195533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195534 suid=74 rport=43118 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109569.600:22509): pid=195533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195534 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109569.601:22510): pid=195533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109569.602:22511): pid=195533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109569.602:22512): pid=195533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109569.762:22513): pid=195581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109569.897:22514): pid=195576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195581 suid=74 rport=43126 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109569.898:22515): pid=195576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195581 suid=74 rport=43126 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109570.485:22516): pid=195576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195581 suid=74 rport=43126 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109570.485:22517): pid=195576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195581 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109570.486:22518): pid=195576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109570.487:22519): pid=195576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109570.487:22520): pid=195576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109570.676:22521): pid=195585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195585 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109570.793:22522): pid=195584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195585 suid=74 rport=43132 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109570.793:22523): pid=195584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195585 suid=74 rport=43132 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109571.315:22524): pid=195584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195585 suid=74 rport=43132 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109571.316:22525): pid=195584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195585 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109571.317:22526): pid=195584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109571.317:22527): pid=195584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109571.317:22528): pid=195584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109571.480:22529): pid=195595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195595 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109571.624:22530): pid=195594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195595 suid=74 rport=43146 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109571.624:22531): pid=195594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195595 suid=74 rport=43146 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109572.204:22532): pid=195594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195595 suid=74 rport=43146 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109572.204:22533): pid=195594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195595 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109572.205:22534): pid=195594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109572.207:22535): pid=195594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195594 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109572.207:22536): pid=195594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109572.363:22537): pid=195605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195605 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109572.531:22538): pid=195604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195605 suid=74 rport=43156 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109572.531:22539): pid=195604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195605 suid=74 rport=43156 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109573.089:22540): pid=195604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195605 suid=74 rport=43156 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109573.089:22541): pid=195604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195605 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109573.090:22542): pid=195604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109573.091:22543): pid=195604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195604 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109573.091:22544): pid=195604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109573.250:22545): pid=195615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109573.390:22546): pid=195614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195615 suid=74 rport=43166 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109573.390:22547): pid=195614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195615 suid=74 rport=43166 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109574.076:22548): pid=195614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195615 suid=74 rport=43166 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109574.076:22549): pid=195614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195615 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109574.076:22550): pid=195614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109574.077:22551): pid=195614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109574.077:22552): pid=195614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109574.090:22553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109574.093:22554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109574.225:22555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109574.297:22556): pid=195661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195661 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109574.313:22557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109574.392:22558): pid=195654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195661 suid=74 rport=43168 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109574.392:22559): pid=195654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195661 suid=74 rport=43168 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109574.974:22560): pid=195654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195661 suid=74 rport=43168 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109574.974:22561): pid=195654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195661 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109574.974:22562): pid=195654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109574.975:22563): pid=195654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109574.975:22564): pid=195654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109575.138:22565): pid=195684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195684 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109575.278:22566): pid=195674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195684 suid=74 rport=43176 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109575.278:22567): pid=195674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195684 suid=74 rport=43176 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109575.853:22568): pid=195674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195684 suid=74 rport=43176 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109575.854:22569): pid=195674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195684 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109575.854:22570): pid=195674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109575.854:22571): pid=195674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195674 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109575.855:22572): pid=195674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109576.013:22573): pid=195888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109576.151:22574): pid=195887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195888 suid=74 rport=43390 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109576.151:22575): pid=195887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195888 suid=74 rport=43390 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109576.725:22576): pid=195887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195888 suid=74 rport=43390 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109576.725:22577): pid=195887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195888 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109576.726:22578): pid=195887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109576.726:22579): pid=195887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195887 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109576.726:22580): pid=195887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109576.879:22581): pid=195890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195890 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109577.016:22582): pid=195889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195890 suid=74 rport=43394 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109577.016:22583): pid=195889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195890 suid=74 rport=43394 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109577.695:22584): pid=195889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195890 suid=74 rport=43394 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109577.695:22585): pid=195889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195890 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109577.696:22586): pid=195889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109577.697:22587): pid=195889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195889 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109577.697:22588): pid=195889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109577.882:22589): pid=195953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195953 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109578.023:22590): pid=195952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195953 suid=74 rport=43408 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109578.023:22591): pid=195952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=195953 suid=74 rport=43408 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109578.143:22592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109578.147:22593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109578.257:22594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109578.328:22595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109578.358:22596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109578.433:22597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109578.653:22598): pid=195952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195953 suid=74 rport=43408 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109578.653:22599): pid=195952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195953 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109578.654:22600): pid=195952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109578.654:22601): pid=195952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=195952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109578.655:22602): pid=195952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109578.805:22603): pid=196027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196027 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109578.941:22604): pid=196026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196027 suid=74 rport=43420 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109578.942:22605): pid=196026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196027 suid=74 rport=43420 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109579.572:22606): pid=196026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196027 suid=74 rport=43420 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109579.572:22607): pid=196026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196027 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109579.572:22608): pid=196026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109579.573:22609): pid=196026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196026 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109579.573:22610): pid=196026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109579.722:22611): pid=196037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109579.860:22612): pid=196036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196037 suid=74 rport=43432 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109579.860:22613): pid=196036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196037 suid=74 rport=43432 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109580.445:22614): pid=196036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196037 suid=74 rport=43432 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109580.445:22615): pid=196036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196037 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109580.446:22616): pid=196036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109580.446:22617): pid=196036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196036 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109580.447:22618): pid=196036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109580.614:22619): pid=196096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109580.742:22620): pid=196095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196096 suid=74 rport=43434 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109580.742:22621): pid=196095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196096 suid=74 rport=43434 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109581.420:22622): pid=196095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196096 suid=74 rport=43434 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109581.421:22623): pid=196095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196096 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109581.421:22624): pid=196095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109581.422:22625): pid=196095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196095 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109581.422:22626): pid=196095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109581.587:22627): pid=196167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196167 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109581.727:22628): pid=196166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196167 suid=74 rport=43438 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109581.727:22629): pid=196166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196167 suid=74 rport=43438 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109582.316:22630): pid=196166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196167 suid=74 rport=43438 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109582.317:22631): pid=196166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196167 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109582.318:22632): pid=196166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109582.319:22633): pid=196166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109582.319:22634): pid=196166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109582.451:22635): pid=196238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196238 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1770109582.461:22636): pid=196240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196240 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109582.566:22637): pid=196232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=196238 suid=74 rport=49034 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109582.566:22638): pid=196232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=196238 suid=74 rport=49034 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109582.592:22639): pid=196237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196240 suid=74 rport=43452 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109582.593:22640): pid=196237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196240 suid=74 rport=43452 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109583.034:22641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109583.151:22642): pid=196237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196240 suid=74 rport=43452 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109583.152:22643): pid=196237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196240 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109583.152:22644): pid=196237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109583.153:22645): pid=196237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196237 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109583.153:22646): pid=196237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109583.310:22647): pid=196278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196278 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109583.471:22648): pid=196277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196278 suid=74 rport=43464 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109583.472:22649): pid=196277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196278 suid=74 rport=43464 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1770109583.489:22650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109583.955:22651): pid=196232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196238 suid=74 rport=49034 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109583.956:22652): pid=196232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196238 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109583.956:22653): pid=196232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109583.957:22654): pid=196232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196232 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109583.957:22655): pid=196232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109584.047:22656): pid=196277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196278 suid=74 rport=43464 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109584.047:22657): pid=196277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196278 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109584.048:22658): pid=196277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109584.049:22659): pid=196277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109584.049:22660): pid=196277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109584.212:22661): pid=196289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196289 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109584.402:22662): pid=196288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196289 suid=74 rport=43468 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109584.402:22663): pid=196288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196289 suid=74 rport=43468 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109584.901:22664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109585.043:22665): pid=196288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196289 suid=74 rport=43468 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109585.043:22666): pid=196288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196289 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109585.044:22667): pid=196288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109585.045:22668): pid=196288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196288 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109585.045:22669): pid=196288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109585.213:22670): pid=196346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109585.258:22671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109585.387:22672): pid=196331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196346 suid=74 rport=43482 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109585.387:22673): pid=196331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196346 suid=74 rport=43482 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109585.982:22674): pid=196331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196346 suid=74 rport=43482 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109585.983:22675): pid=196331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196346 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109585.983:22676): pid=196331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109585.984:22677): pid=196331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196331 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109585.984:22678): pid=196331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109586.133:22679): pid=196537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109586.265:22680): pid=196536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196537 suid=74 rport=52902 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109586.265:22681): pid=196536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196537 suid=74 rport=52902 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109586.801:22682): pid=196536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196537 suid=74 rport=52902 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109586.801:22683): pid=196536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196537 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109586.801:22684): pid=196536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109586.802:22685): pid=196536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109586.802:22686): pid=196536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109586.971:22687): pid=196547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109587.110:22688): pid=196546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196547 suid=74 rport=52914 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109587.110:22689): pid=196546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196547 suid=74 rport=52914 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109587.692:22690): pid=196546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196547 suid=74 rport=52914 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109587.693:22691): pid=196546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196547 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109587.693:22692): pid=196546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109587.693:22693): pid=196546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196546 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109587.693:22694): pid=196546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109587.852:22695): pid=196574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109588.055:22696): pid=196568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196574 suid=74 rport=52926 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109588.055:22697): pid=196568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196574 suid=74 rport=52926 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109588.581:22698): pid=196568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196574 suid=74 rport=52926 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109588.581:22699): pid=196568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196574 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109588.582:22700): pid=196568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109588.582:22701): pid=196568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109588.582:22702): pid=196568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109588.729:22703): pid=196620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196620 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109588.860:22704): pid=196619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196620 suid=74 rport=52928 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109588.861:22705): pid=196619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196620 suid=74 rport=52928 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109589.145:22706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109589.334:22707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109589.411:22708): pid=196619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196620 suid=74 rport=52928 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109589.411:22709): pid=196619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196620 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109589.412:22710): pid=196619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109589.413:22711): pid=196619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196619 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109589.413:22712): pid=196619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109589.567:22713): pid=196668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109589.707:22714): pid=196667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196668 suid=74 rport=52940 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109589.707:22715): pid=196667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196668 suid=74 rport=52940 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109590.285:22716): pid=196667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196668 suid=74 rport=52940 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109590.286:22717): pid=196667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196668 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109590.287:22718): pid=196667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109590.288:22719): pid=196667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196667 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109590.288:22720): pid=196667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109590.461:22721): pid=196678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196678 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109590.603:22722): pid=196677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196678 suid=74 rport=52946 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109590.603:22723): pid=196677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196678 suid=74 rport=52946 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109591.276:22724): pid=196677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196678 suid=74 rport=52946 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109591.277:22725): pid=196677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196678 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109591.277:22726): pid=196677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109591.278:22727): pid=196677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196677 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109591.278:22728): pid=196677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109591.509:22729): pid=196688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196688 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109591.628:22730): pid=196687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196688 suid=74 rport=52962 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109591.629:22731): pid=196687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196688 suid=74 rport=52962 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109592.122:22732): pid=196687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196688 suid=74 rport=52962 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109592.122:22733): pid=196687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196688 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109592.123:22734): pid=196687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109592.124:22735): pid=196687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196687 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109592.124:22736): pid=196687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109592.286:22737): pid=196690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109592.422:22738): pid=196689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196690 suid=74 rport=52966 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109592.422:22739): pid=196689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196690 suid=74 rport=52966 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109592.980:22740): pid=196689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196690 suid=74 rport=52966 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109592.980:22741): pid=196689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196690 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109592.981:22742): pid=196689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109592.981:22743): pid=196689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196689 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109592.982:22744): pid=196689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109593.120:22745): pid=196700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196700 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109593.248:22746): pid=196699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196700 suid=74 rport=52970 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109593.248:22747): pid=196699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196700 suid=74 rport=52970 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109593.779:22748): pid=196699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196700 suid=74 rport=52970 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109593.779:22749): pid=196699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196700 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109593.780:22750): pid=196699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109593.781:22751): pid=196699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109593.781:22752): pid=196699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109593.943:22753): pid=196775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196775 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109594.077:22754): pid=196774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196775 suid=74 rport=52980 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109594.078:22755): pid=196774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196775 suid=74 rport=52980 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109594.645:22756): pid=196774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196775 suid=74 rport=52980 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109594.646:22757): pid=196774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196775 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109594.646:22758): pid=196774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109594.647:22759): pid=196774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109594.647:22760): pid=196774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109595.872:22761): pid=196977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196977 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109596.011:22762): pid=196961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196977 suid=74 rport=52994 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109596.011:22763): pid=196961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=196977 suid=74 rport=52994 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109596.591:22764): pid=196961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196977 suid=74 rport=52994 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109596.591:22765): pid=196961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196977 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109596.592:22766): pid=196961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109596.592:22767): pid=196961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=196961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109596.592:22768): pid=196961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109596.760:22769): pid=197122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109596.904:22770): pid=197121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197122 suid=74 rport=37856 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109596.904:22771): pid=197121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197122 suid=74 rport=37856 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109597.510:22772): pid=197121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197122 suid=74 rport=37856 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109597.510:22773): pid=197121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197122 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109597.511:22774): pid=197121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109597.511:22775): pid=197121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109597.512:22776): pid=197121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109597.671:22777): pid=197168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109597.809:22778): pid=197167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197168 suid=74 rport=37870 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109597.809:22779): pid=197167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197168 suid=74 rport=37870 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109598.546:22780): pid=197167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197168 suid=74 rport=37870 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109598.546:22781): pid=197167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197168 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109598.547:22782): pid=197167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109598.548:22783): pid=197167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197167 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109598.548:22784): pid=197167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109598.704:22785): pid=197231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197231 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109598.839:22786): pid=197230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197231 suid=74 rport=37884 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109598.839:22787): pid=197230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197231 suid=74 rport=37884 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109599.392:22788): pid=197230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197231 suid=74 rport=37884 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109599.392:22789): pid=197230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197231 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109599.393:22790): pid=197230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109599.393:22791): pid=197230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197230 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109599.393:22792): pid=197230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109599.563:22793): pid=197241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197241 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109599.722:22794): pid=197240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197241 suid=74 rport=37886 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109599.722:22795): pid=197240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197241 suid=74 rport=37886 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109600.314:22796): pid=197240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197241 suid=74 rport=37886 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109600.314:22797): pid=197240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197241 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109600.315:22798): pid=197240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109600.315:22799): pid=197240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197240 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109600.315:22800): pid=197240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109600.459:22801): pid=197243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109600.590:22802): pid=197242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197243 suid=74 rport=37888 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109600.591:22803): pid=197242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197243 suid=74 rport=37888 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109601.160:22804): pid=197242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197243 suid=74 rport=37888 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109601.160:22805): pid=197242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197243 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109601.161:22806): pid=197242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109601.161:22807): pid=197242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109601.161:22808): pid=197242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109601.316:22809): pid=197253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197253 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109601.448:22810): pid=197252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197253 suid=74 rport=37892 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109601.448:22811): pid=197252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197253 suid=74 rport=37892 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109602.165:22812): pid=197252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197253 suid=74 rport=37892 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109602.166:22813): pid=197252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197253 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109602.166:22814): pid=197252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109602.167:22815): pid=197252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109602.167:22816): pid=197252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109602.340:22817): pid=197263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197263 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109602.491:22818): pid=197262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197263 suid=74 rport=37908 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109602.492:22819): pid=197262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197263 suid=74 rport=37908 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109603.151:22820): pid=197262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197263 suid=74 rport=37908 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109603.152:22821): pid=197262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197263 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109603.152:22822): pid=197262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109603.153:22823): pid=197262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197262 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109603.153:22824): pid=197262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109603.303:22825): pid=197374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109603.443:22826): pid=197373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197374 suid=74 rport=37916 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109603.443:22827): pid=197373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197374 suid=74 rport=37916 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109604.033:22828): pid=197373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197374 suid=74 rport=37916 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109604.033:22829): pid=197373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197374 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109604.034:22830): pid=197373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109604.035:22831): pid=197373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109604.035:22832): pid=197373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109604.197:22833): pid=197384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197384 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109604.341:22834): pid=197383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197384 suid=74 rport=37918 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109604.341:22835): pid=197383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197384 suid=74 rport=37918 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109604.803:22836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109604.807:22837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109604.960:22838): pid=197383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197384 suid=74 rport=37918 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109604.960:22839): pid=197383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197384 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109604.962:22840): pid=197383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109604.962:22841): pid=197383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197383 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109604.962:22842): pid=197383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109604.983:22843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109605.007:22844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109605.153:22845): pid=197435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109605.347:22846): pid=197434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197435 suid=74 rport=37932 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109605.347:22847): pid=197434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197435 suid=74 rport=37932 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109605.852:22848): pid=197434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197435 suid=74 rport=37932 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109605.852:22849): pid=197434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197435 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109605.853:22850): pid=197434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109605.853:22851): pid=197434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197434 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109605.853:22852): pid=197434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109606.003:22853): pid=197593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197593 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109606.136:22854): pid=197545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197593 suid=74 rport=40012 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109606.136:22855): pid=197545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197593 suid=74 rport=40012 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109607.129:22856): pid=197545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197593 suid=74 rport=40012 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109607.129:22857): pid=197545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197593 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109607.130:22858): pid=197545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109607.131:22859): pid=197545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109607.131:22860): pid=197545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109607.332:22861): pid=197770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109607.482:22862): pid=197769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197770 suid=74 rport=40018 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109607.482:22863): pid=197769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197770 suid=74 rport=40018 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109608.071:22864): pid=197769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197770 suid=74 rport=40018 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109608.071:22865): pid=197769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197770 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109608.072:22866): pid=197769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109608.072:22867): pid=197769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109608.072:22868): pid=197769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109608.221:22869): pid=197889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197889 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109608.356:22870): pid=197888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197889 suid=74 rport=40034 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109608.357:22871): pid=197888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=197889 suid=74 rport=40034 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109609.043:22872): pid=197888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197889 suid=74 rport=40034 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109609.044:22873): pid=197888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197889 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109609.045:22874): pid=197888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.70.139.141 addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109609.046:22875): pid=197888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109609.046:22876): pid=197888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="ftp" exe="/usr/sbin/sshd" hostname=? addr=196.70.139.141 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109609.070:22877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109609.075:22878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109609.080:22879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109609.269:22880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109609.297:22881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109609.384:22882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109610.744:22883): pid=197983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197983 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109612.841:22884): pid=197982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=197983 suid=74 rport=52948 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109612.841:22885): pid=197982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=197983 suid=74 rport=52948 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109614.139:22886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109614.557:22887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109616.141:22888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109616.274:22889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109616.274:22890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109616.467:22891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109620.147:22892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109620.307:22893): pid=198529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=198529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1770109620.334:22894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1770109620.540:22895): pid=198507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=198529 suid=74 rport=45660 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109620.540:22896): pid=198507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=198529 suid=74 rport=45660 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109621.750:22897): pid=197982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197983 suid=74 rport=52948 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109621.750:22898): pid=197982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197983 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109621.750:22899): pid=197982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109621.751:22900): pid=197982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=197982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109621.751:22901): pid=197982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109626.856:22902): pid=198853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=198853 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109628.210:22903): pid=198852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=198853 suid=74 rport=56138 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109628.210:22904): pid=198852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=198853 suid=74 rport=56138 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109628.649:22905): pid=198507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198529 suid=74 rport=45660 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109628.649:22906): pid=198507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=198529 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109628.650:22907): pid=198507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109628.650:22908): pid=198507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=198507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109628.650:22909): pid=198507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109630.296:22910): pid=198852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198853 suid=74 rport=56138 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109630.297:22911): pid=198852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=198853 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109630.297:22912): pid=198852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109630.298:22913): pid=198852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=198852 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109630.298:22914): pid=198852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109632.258:22915): pid=198969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=198969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109632.510:22916): pid=198959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=198969 suid=74 rport=35922 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109632.511:22917): pid=198959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=198969 suid=74 rport=35922 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109633.772:22918): pid=198959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198969 suid=74 rport=35922 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109633.773:22919): pid=198959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=198969 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109633.773:22920): pid=198959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109633.774:22921): pid=198959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=198959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109633.774:22922): pid=198959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109635.146:22923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109635.149:22924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109635.262:22925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109635.368:22926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109639.466:22927): pid=199483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=199483 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109639.743:22928): pid=199482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=199483 suid=74 rport=35930 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109639.743:22929): pid=199482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=199483 suid=74 rport=35930 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1770109640.146:22930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109640.150:22931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109640.154:22932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109640.384:22933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109640.398:22934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109640.436:22935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109642.418:22936): pid=199482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=199483 suid=74 rport=35930 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109642.418:22937): pid=199482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=199483 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109642.419:22938): pid=199482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=171.243.151.188 addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109642.419:22939): pid=199482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=199482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109642.419:22940): pid=199482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=171.243.151.188 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109645.144:22941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109645.657:22942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109647.151:22943): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109647.448:22944): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109651.145:22945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109651.304:22946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109661.484:22947): pid=200729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=200729 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109661.679:22948): pid=200728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=200729 suid=74 rport=47648 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109661.679:22949): pid=200728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=200729 suid=74 rport=47648 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109664.343:22950): pid=200728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=200729 suid=74 rport=47648 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1770109664.343:22951): pid=200728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=200729 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1770109664.344:22952): pid=200728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=116.110.156.98 addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109664.345:22953): pid=200728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=200728 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1770109664.345:22954): pid=200728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=116.110.156.98 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109666.146:22955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109666.149:22956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109666.246:22957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96b9ceaba9ca6913cedf2126fb2870fc7ccb4163ed858a2d4bf74dbc4ca90202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109666.325:22958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=77175baa51a21df48df72bece4ee36f96556927f64e31b71b25ebefd1eddf60f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109669.735:22959): pid=201194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=201194 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109669.736:22960): pid=201193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=201194 suid=74 rport=42256 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109669.737:22961): pid=201193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=201194 suid=74 rport=42256 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770109669.805:22962): pid=201193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1770109669.822:22963): pid=201193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109669.822:22964): pid=201193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770109669.856:22965): pid=201193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109669.856:22966): pid=201193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=201194 suid=74 rport=42256 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770109669.858:22967): pid=201193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770109669.859:22968): pid=201193 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=162 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1770109669.859:22968): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe6adfa680 a2=4 a3=3e8 items=0 ppid=40636 pid=201193 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770109669.859:22968): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1770109669.860:22969): pid=201193 uid=0 auid=1000 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_ACCT msg=audit(1770109669.913:22970): pid=201196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1770109669.913:22971): pid=201196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1770109669.914:22972): pid=201196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770109669.914:22973): pid=201196 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=163 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1770109669.914:22973): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffd711b5940 a2=4 a3=3e8 items=0 ppid=1 pid=201196 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=163 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770109669.914:22973): proctitle="(systemd)" type=USER_START msg=audit(1770109669.916:22974): pid=201196 uid=0 auid=1000 ses=163 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SERVICE_START msg=audit(1770109670.079:22975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770109670.100:22976): pid=201193 uid=0 auid=1000 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1770109670.102:22977): pid=201211 uid=0 auid=1000 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=201211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=CRED_ACQ msg=audit(1770109670.105:22978): pid=201211 uid=0 auid=1000 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1770109670.150:22979): pid=201193 uid=0 auid=1000 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770109670.150:22980): pid=201193 uid=0 auid=1000 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1770109670.152:22981): pid=201193 uid=0 auid=1000 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=201212 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1770109670.218:22982): pid=201225 uid=1000 auid=1000 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770109670.218:22983): pid=201225 uid=1000 auid=1000 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746D79646468696B65797972776A6A757777737A737377797264757A6C6A786E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770109670.219:22984): pid=201225 uid=1000 auid=1000 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770109670.223:22985): pid=201225 uid=1000 auid=1000 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770109670.993:22986): pid=201225 uid=1000 auid=1000 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1770109670.993:22987): pid=201225 uid=1000 auid=1000 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1770109670.999:22988): pid=201193 uid=0 auid=1000 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1770109671.000:22989): pid=201193 uid=0 auid=1000 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=SERVICE_START msg=audit(1770109671.143:22990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109671.148:22991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109671.153:22992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109671.288:22993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e07b9bd8fdeb34c083c6ba455502fbaee5115369005c91dc9f0d5bfe52ca562e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109671.324:22994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=197e3ac6c1bf794de0fa5706d20e44283620ec8f8fb6fe64ec740f58a04b50a6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109671.429:22995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e2b30a5c1ba2570b436f199f18275480d2c461c18a4fdb1b6ca6d9fdfc3bbafd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109674.914:22996): pid=201193 uid=0 auid=1000 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=201211 suid=1000 rport=42256 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1770109674.914:22997): pid=201193 uid=0 auid=1000 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=201211 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1770109674.917:22998): pid=201193 uid=0 auid=1000 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1770109674.918:22999): pid=201193 uid=0 auid=1000 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1770109674.918:23000): pid=201193 uid=0 auid=1000 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=201193 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=SERVICE_START msg=audit(1770109676.145:23001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109676.634:23002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39c8efb96f0bcc75db583dbee557372119c12bed5503845e9db5f3999aceb4aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109678.144:23003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109679.306:23004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2cbeafabdef569acdcb739d68d1c17f713a3aab72af4d4bd6cd122f022a78040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109682.150:23005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1770109682.198:23006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109682.198:23007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109682.319:23008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=964edbe0b3e38fd5fb2f1cbc890f5b40eb54bcc73c0aad9d8aedf2123fad26da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1770109685.146:23009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109686.539:23010): pid=202290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=202290 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1770109686.542:23011): pid=202237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=202290 suid=74 rport=53026 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1770109686.543:23012): pid=202237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=202290 suid=74 rport=53026 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1770109686.607:23013): pid=202237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1770109686.624:23014): pid=202237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109686.624:23015): pid=202237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:95:6d:a4:72:ab:96:9a:1a:62:9f:3d:e9:ac:6b:59:19:db:7b:d0:3f:a1:09:26:01:a8:e5:0a:2d:8f:c3:ac:cc exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1770109686.659:23016): pid=202237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1770109686.659:23017): pid=202237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=202290 suid=74 rport=53026 laddr=38.102.83.210 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1770109686.661:23018): pid=202237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770109686.661:23019): pid=202237 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=164 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1770109686.661:23019): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd2f49cd40 a2=4 a3=3e8 items=0 ppid=40636 pid=202237 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=164 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770109686.661:23019): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1770109686.663:23020): pid=202237 uid=0 auid=1000 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_ACCT msg=audit(1770109686.717:23021): pid=202338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1770109686.717:23022): pid=202338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1770109686.719:23023): pid=202338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1770109686.719:23024): pid=202338 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=165 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1770109686.719:23024): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffd711b5940 a2=4 a3=3e8 items=0 ppid=1 pid=202338 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=165 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1770109686.719:23024): proctitle="(systemd)" type=USER_START msg=audit(1770109686.722:23025): pid=202338 uid=0 auid=1000 ses=165 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SERVICE_START msg=audit(1770109686.881:23026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1770109686.907:23027): pid=202237 uid=0 auid=1000 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1770109686.908:23028): pid=202362 uid=0 auid=1000 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=202362 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=CRED_ACQ msg=audit(1770109686.911:23029): pid=202362 uid=0 auid=1000 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1770109686.955:23030): pid=202237 uid=0 auid=1000 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1770109686.955:23031): pid=202237 uid=0 auid=1000 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1770109686.957:23032): pid=202237 uid=0 auid=1000 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=202363 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1770109687.012:23033): pid=202363 uid=1000 auid=1000 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1770109687.013:23034): pid=202363 uid=1000 auid=1000 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=7273796E63202D2D736572766572202D2D73656E646572202D6C4C6F67447470727A652E4C73667843202E202F7661722F6C6F67 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1770109687.014:23035): pid=202363 uid=1000 auid=1000 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1770109687.018:23036): pid=202363 uid=1000 auid=1000 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1770109687.073:23037): pid=202379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8d:41:03:db:0b:af:0c:c6:3e:6d:30:67:a5:8f:a8:3b:dc:21:f4:bd:b0:0e:60:ff:25:9d:4a:5e:65:d8:6f:21 direction=? spid=202379 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"